CVE-2021-20815

Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

Six Apart Movable Type Security Vulnerability

Six Apart Movable Type is an application from Six Apart USA. It provides features including multiple users, comments, references TrackBack, themes, and more. A security vulnerability exists in Six Apart Movable Type, which stems from a cross-site scripting XSS vulnerability. Affected Products and...

CVE-2020-5669: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

PT-2021-12472

Name of the Vulnerable Software and Affected Versions: Movable Type Premium versions 1.37 and earlier Movable Type Premium Advanced versions 1.37 and earlier Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Thi...

PT-2021-14281

Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.5002 and earlier Movable Type versions 6.8.2 and earlier Movable Type Advanced versions 7 r.5002 and earlier Movable Type Advanced versions 6.8.2 and earlier Movable Type Premium version 1.46 and earlier Movable Type...

CVE-2021-20812: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series and Movable Type Premium Advanced 1.44 and earlier allows remote attackers to inject arbitrary script or HTML via unspecified vectors...

PT-2021-14266

Name of the Vulnerable Software and Affected Versions: Movable Type Advanced versions 7.0.0 through 7 r.4903 Movable Type Premium Advanced versions 1.0.0 through 1.44 Description: A cross-site scripting issue in the Setting screen of Server Sync of Movable Type allows remote attackers to inject...

CVE-2021-20663

Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type 6.7.5 and earlier Movable Type 6.7 Series, Movable Type Premium 1.39 and...

CVE-2021-20665: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

CVE-2020-5574: Improper Neutralization of Special Elements in Output Used by a Downstream Component

HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

CVE-2020-5528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...