CVE-2012-1503

Movable Type Pro 5.13en (MT Pro 5.13) has a Cross-Site Scripting (XSS) vulnerability in the comment section that allows remote attackers to inject arbitrary script/HTML. Descriptions across sources describe it as a stored XSS issue, with exploitation evidenced by multiple external advisories and ...

CVE-2012-1503

Cross-site scripting XSS vulnerability in Six Apart formerly Six Apart KK Movable Type MT Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section...