CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
52.8%
MTCMS and multiple Movable Type plugins provided by SKYARC System Co., Ltd. contain a cross-site request forgery vulnerability.
If a user views a malicious page while logged into MTCMS or a Movable Type implementation with any of the plugins from “Products Affected” running, information managed by MTCMS or Movable Type may be altered.
Apply an update
Update to the latest version according to the information provided by the developer.
The following pluigins for Movable Type below are also affected: