Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CPE | Name | Operator | Version |
---|---|---|---|
movabletype | le | 5.14 | |
movabletype | eq | 5.04 | |
movabletype | eq | 5.13 | |
movabletype | eq | 5.12 | |
movabletype | eq | 5.11 |