CVE-2020-5574: Improper Neutralization of Special Elements in Output Used by a Downstream Component

HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

CVE-2020-5576: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

Multiple vulnerabilities in Movable Type

Overview Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. HTML attribute value injection vulnerability CWE-74 - CVE-2020-5574 Cross-site scripting due to a flaw in processing multiple query strings CWE-79 - CVE-2020-5575 Cross-site request forgery CWE-352 -...

JVN#28806943: Multiple vulnerabilities in Movable Type

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. HTML attribute value injection vulnerability CWE-74 - CVE-2020-5574 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N| Base Score: 4.7 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N...

Movable Type Detection (HTTP)

HTTP based detection of Movable Type. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113643";...

Movable Type Cross-Site Scripting Vulnerability (CNVD-2020-04553)

Movable Type, or MT for short, is a weblog publishing system from California-based Six Apart, Inc. Movable Type suffers from a cross-site scripting vulnerability. A remote attacker can use this vulnerability to inject arbitrary web script or HTML into block editors and rich text editors via...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

Cross site scripting

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

CVE-2020-5528

CVE-2020-5528 is a cross-site scripting vulnerability in Movable Type series (including Movable Type 7, 6.5, and related editions) that allows remote attackers to inject arbitrary web script or HTML into the block editor and Rich Text Editor via a specially crafted URL. The vulnerability affects ...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

Movable Type vulnerable to cross-site scripting

Overview Movable Type provided by Six Apart Ltd. contains a cross-site scripting vulnerability CWE-79 in block editor and rich text editor. Six Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the...

CVE-2020-5528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

JVN#94435544: Movable Type vulnerable to cross-site scripting

Movable Type provided by Six Apart Ltd. contains a cross-site scripting vulnerability CWE-79 in block editor and rich text editor. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the Software Update to the latest version according to the information...

CVE-2019-6025

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 7.1.3 and earlier Movable Type 7, Movable Type 6.5.0 and 6.5.1 Movable Type 6.5, Movable Type 6.3.9 and earlier Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x, Movable Type Advanced 7 r.4602 7.1.3 and earlier Movable Type 7, Movabl...

CVE-2019-6025

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 7.1.3 and earlier Movable Type 7, Movable Type 6.5.0 and 6.5.1 Movable Type 6.5, Movable Type 6.3.9 and earlier Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x, Movable Type Advanced 7 r.4602 7.1.3 and earlier Movable Type 7, Movabl...

Open redirect

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 7.1.3 and earlier Movable Type 7, Movable Type 6.5.0 and 6.5.1 Movable Type 6.5, Movable Type 6.3.9 and earlier Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x, Movable Type Advanced 7 r.4602 7.1.3 and earlier Movable Type 7, Movabl...

CVE-2019-6025

CVE-2019-6025 describes an open redirect vulnerability in Movable Type and related products. A specially crafted URL can cause users to be redirected to arbitrary sites, enabling phishing. Affected: Movable Type 7 (r.4602/7.1.3) and earlier across MT 6.x, MT Advanced 6.x/7.x, MT Premium variants....