https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 06:14:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-256711 EUVD-2026-256711 https://cve.radiocsirt.org/vuln/euvd-2026-256711 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54856 <p>Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with &#34;ContentType Management&#34; privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.</p> <p>Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with &#34;ContentType Management&#34; privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-54856 https://cve.radiocsirt.org/vuln/ghsa-4wvq-85hg-6256 <p>Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with &#34;ContentType Management&#34; privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.</p> <p>Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with &#34;ContentType Management&#34; privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.</p> https://cve.radiocsirt.org/vuln/ghsa-4wvq-85hg-6256 https://cve.radiocsirt.org/vuln/jvndb-2025-000090 <p>Movable Type provided by Six Apart Ltd. contains multiple stored cross-site scripting vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;Stored cross-site scripting vulnerability in Edit ContentData page (CWE-79) - CVE-2025-54856&lt;/li&gt; &lt;li&gt;Stored cross-site scripting vulnerability in Edit CategorySet of ContentType page (CWE-79) - CVE-2025-62499&lt;/li&gt; &lt;/ul&gt; Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p> <p>Movable Type provided by Six Apart Ltd. contains multiple stored cross-site scripting vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;Stored cross-site scripting vulnerability in Edit ContentData page (CWE-79) - CVE-2025-54856&lt;/li&gt; &lt;li&gt;Stored cross-site scripting vulnerability in Edit CategorySet of ContentType page (CWE-79) - CVE-2025-62499&lt;/li&gt; &lt;/ul&gt; Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-000090