<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-20T20:27:52.848276+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2022-22653</id>
    <title>cnvd-2022-22653</title>
    <updated>2026-10-20T20:27:52.854370+00:00</updated>
    <content>cnvd-2022-22653</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2022-22653"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-21715</id>
    <title>EUVD-2026-21715</title>
    <updated>2026-10-20T20:27:52.854409+00:00</updated>
    <content>EUVD-2026-21715</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-21715"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2021-20664</id>
    <title>fkie_cve-2021-20664</title>
    <updated>2026-10-20T20:27:52.854422+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2021-20664"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-pww3-vwvw-q638</id>
    <title>GHSA-pww3-vwvw-q638</title>
    <updated>2026-10-20T20:27:52.854453+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-pww3-vwvw-q638"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2021-20664</id>
    <title>gsd-2021-20664</title>
    <updated>2026-10-20T20:27:52.854470+00:00</updated>
    <content>gsd-2021-20664</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2021-20664"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/jvndb-2021-000017</id>
    <title>jvndb-2021-000017</title>
    <updated>2026-10-20T20:27:52.854481+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below.
*Cross-site scripting vulnerability in Role authority setting screen (CWE-79) - CVE-2021-20663
*Cross-site scripting vulnerability in Asset registration screen (CWE-79) - CVE-2021-20664
*Cross-site scripting vulnerability in Add asset screen of Contents field (CWE-79) - CVE-2021-20665

Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/jvndb-2021-000017"/>
  </entry>
</feed>
