Most recent entries from all

EUVD-2026-21860

fkie_cve-2021-20811

Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.44 and earlier, and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.

GHSA-9xx6-3c29-j6cq

gsd-2021-20811

jvndb-2021-000079

Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. * Cross-site scripting vulnerability in Search screen (CWE-79) - CVE-2021-20808 * Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type (CWE-79) - CVE-2021-20809 * Cross-site scripting vulnerability in Website Management screen (CWE-79) - CVE-2021-20810 * Cross-site scripting vulnerability in List of Assets screen (CWE-79) - CVE-2021-20811 * Cross-site scripting vulnerability in Setting screen of Server Sync (CWE-79) - CVE-2021-20812 * Cross-site scripting vulnerability in Edit screen of Content Data (CWE-79) - CVE-2021-20813 * Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin (CWE-79) - CVE-2021-20814 * Cross-site scripting vulnerability in Edit Boilerplate screen (CWE-79) - CVE-2021-20815 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.