3 matches found
CVE-2012-1503
Movable Type Pro 5.13en (MT Pro 5.13) has a Cross-Site Scripting (XSS) vulnerability in the comment section that allows remote attackers to inject arbitrary script/HTML. Descriptions across sources describe it as a stored XSS issue, with exploitation evidenced by multiple external advisories and ...
CVE-2012-1503
Cross-site scripting XSS vulnerability in Six Apart formerly Six Apart KK Movable Type MT Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section...
PT-2014-2228
Name of the Vulnerable Software and Affected Versions Movable Type MT Pro version 5.13 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the comment section. This could potentially lead to unauthorized actions on the affected system...