JVN#73357573: Movable Type vulnerable to cross-site scripting

Movable Type contains an issue in processing the management page, which may result in a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed or a false form may be displayed on the administrator’s web browser.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• Movable Type 5.14 and earlier

According to the developer, this vulnerability was addressed in Movable Type 5.2.