https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T05:35:06.887765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256711 EUVD-2026-256711 2026-10-28T05:35:06.951055+00:00 EUVD-2026-256711 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54856 fkie_cve-2025-54856 2026-10-28T05:35:06.951097+00:00

Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.

 https://cve.radiocsirt.org/vuln/ghsa-4wvq-85hg-6256 GHSA-4wvq-85hg-6256 2026-10-28T05:35:06.951132+00:00

Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000090 jvndb-2025-000090 2026-10-28T05:35:06.951150+00:00

Movable Type provided by Six Apart Ltd. contains multiple stored cross-site scripting vulnerabilities listed below. <ul> <li>Stored cross-site scripting vulnerability in Edit ContentData page (CWE-79) - CVE-2025-54856</li> <li>Stored cross-site scripting vulnerability in Edit CategorySet of ContentType page (CWE-79) - CVE-2025-62499</li> </ul> Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.