Cross site scripting

2021-10-2611:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

CPENameOperatorVersion
movable_typele1.37
movable_typele1.37

CPE	Name	Operator	Version
	movable_type	le	1.37
	movable_type	le	1.37

References

jvn.jp/en/jp/JVN94245475/index.html

www.sixapart.jp/movabletype/news/2020/11/18-1101.html