https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 19:40:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-22652 cnvd-2022-22652 https://cve.radiocsirt.org/vuln/cnvd-2022-22652 https://cve.radiocsirt.org/vuln/euvd-2026-21710 EUVD-2026-21710 https://cve.radiocsirt.org/vuln/euvd-2026-21710 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20665 <p>Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> <p>Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20665 https://cve.radiocsirt.org/vuln/ghsa-7ppf-q9mq-qg3g <p>Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> <p>Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-7ppf-q9mq-qg3g https://cve.radiocsirt.org/vuln/gsd-2021-20665 gsd-2021-20665 https://cve.radiocsirt.org/vuln/gsd-2021-20665 https://cve.radiocsirt.org/vuln/jvndb-2021-000017 <p>Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. *Cross-site scripting vulnerability in Role authority setting screen (CWE-79) - CVE-2021-20663 *Cross-site scripting vulnerability in Asset registration screen (CWE-79) - CVE-2021-20664 *Cross-site scripting vulnerability in Add asset screen of Contents field (CWE-79) - CVE-2021-20665 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p> <p>Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. *Cross-site scripting vulnerability in Role authority setting screen (CWE-79) - CVE-2021-20663 *Cross-site scripting vulnerability in Asset registration screen (CWE-79) - CVE-2021-20664 *Cross-site scripting vulnerability in Add asset screen of Contents field (CWE-79) - CVE-2021-20665 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-000017