https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 20:21:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-22653 cnvd-2022-22653 https://cve.radiocsirt.org/vuln/cnvd-2022-22653 https://cve.radiocsirt.org/vuln/euvd-2026-21715 EUVD-2026-21715 https://cve.radiocsirt.org/vuln/euvd-2026-21715 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20664 <p>Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> <p>Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20664 https://cve.radiocsirt.org/vuln/ghsa-pww3-vwvw-q638 <p>Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> <p>Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-pww3-vwvw-q638 https://cve.radiocsirt.org/vuln/gsd-2021-20664 gsd-2021-20664 https://cve.radiocsirt.org/vuln/gsd-2021-20664 https://cve.radiocsirt.org/vuln/jvndb-2021-000017 <p>Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. *Cross-site scripting vulnerability in Role authority setting screen (CWE-79) - CVE-2021-20663 *Cross-site scripting vulnerability in Asset registration screen (CWE-79) - CVE-2021-20664 *Cross-site scripting vulnerability in Add asset screen of Contents field (CWE-79) - CVE-2021-20665 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p> <p>Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. *Cross-site scripting vulnerability in Role authority setting screen (CWE-79) - CVE-2021-20663 *Cross-site scripting vulnerability in Asset registration screen (CWE-79) - CVE-2021-20664 *Cross-site scripting vulnerability in Add asset screen of Contents field (CWE-79) - CVE-2021-20665 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-000017