Vulnerabilities

TI-2009-02380 CVE-2009-2492 · GHSA-cvj4-9f98-hhj7

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type…

LOW 15

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01083 Published 2009-07-17 No fix listed CWE-79

TI-2007-00589 CVE-2007-0604 · GHSA-vr7v-5v7f-wchj

Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote…

LOW 32

Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0113 Published 2007-01-30 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type…

Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote…