Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/10/24 5:55 a.m.3 views

CVE-2025-62499

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of...

4.8CVSS6.1AI score0.00188EPSS
Exploits0References1
NVD
NVD
added 2025/10/23 5:15 a.m.3 views

CVE-2025-62499

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of...

4.8CVSS0.00188EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/23 4:10 a.m.2 views

CVE-2025-62499

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of...

4.8CVSS5.7AI score0.00188EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/23 4:10 a.m.4 views

EUVD-2025-35655

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of...

4.8CVSS5.6AI score0.00188EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/23 4:10 a.m.6 views

CVE-2025-62499

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of...

4.8CVSS0.00188EPSS
Exploits0References3
CVE
CVE
added 2025/10/23 4:10 a.m.12 views

CVE-2025-62499

Movable Type contains a stored cross-site scripting vulnerability in the Edit CategorySet of the ContentType page. If an attacker with ContentType Management stores crafted input, an arbitrary script can execute in the browser of users who access that page. Affected product: Movable Type (Six Apa...

4.8CVSS5.7AI score0.00188EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.3 views

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type is an application from Six Apart USA. Six Apart Movable Type is an application from Six Apart Inc. that provides features such as multiple users, comments, references TrackBack, topics, and more. A cross-site scripting vulnerability exists in Six Apart Movable Type, which...

4.8CVSS5AI score0.00188EPSS
Exploits0References3
Rows per page
Query Builder