Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ARK-Web co., ltd. Component: A-form Clear all filters
TI-2022-18365 CVE-2022-38972 · GHSA-qx7m-g7vm-qw2r

Cross-site scripting in ARK-Web co., ltd. A-Form

Priority LOW 29

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inj…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00975 Published 2022-09-12 No fix listed CWE-79
TI-2011-02337 CVE-2011-2676 · GHSA-mxcv-w3x2-ccgv

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and…

Priority LOW 27

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to m…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01263 Published 2011-11-03 No fix listed CWE-287