Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
2012-04-02T18:55:00.920
2025-04-11T00:51:21.963
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.0 | Yes |
| Application | sixapart | movable_type | 4.01 | Yes |
| Application | sixapart | movable_type | 4.1 | Yes |
| Application | sixapart | movable_type | 4.1 | Yes |
| Application | sixapart | movable_type | 4.01 | Yes |
| Application | sixapart | movable_type | 4.1 | Yes |
| Application | sixapart | movable_type | 4.01 | Yes |
| Application | sixapart | movable_type | 4.1 | Yes |
| Application | sixapart | movable_type | 4.01 | Yes |
| Application | sixapart | movable_type | 4.2 | Yes |
| Application | sixapart | movable_type | 4.2 | Yes |
| Application | sixapart | movable_type | 4.2 | Yes |
| Application | sixapart | movable_type | 4.2 | Yes |
| Application | sixapart | movable_type | 4.12 | Yes |
| Application | sixapart | movable_type | 4.15 | Yes |
| Application | sixapart | movable_type | 4.15 | Yes |
| Application | sixapart | movable_type | 4.15 | Yes |
| Application | sixapart | movable_type | 4.21 | Yes |
| Application | sixapart | movable_type | 4.22 | Yes |
| Application | sixapart | movable_type | 4.23 | Yes |
| Application | sixapart | movable_type | 4.24 | Yes |
| Application | sixapart | movable_type | 4.25 | Yes |
| Application | sixapart | movable_type | 4.26 | Yes |
| Application | sixapart | movable_type | 4.27 | Yes |
| Application | sixapart | movable_type | 4.28 | Yes |
| Application | sixapart | movable_type | 4.29 | Yes |
| Application | sixapart | movable_type | 4.35 | Yes |
| Application | sixapart | movable_type | 4.36 | Yes |
| Application | sixapart | movable_type | 4.261 | Yes |
| Application | sixapart | movable_type | 4.291 | Yes |
| Application | sixapart | movable_type | 4.292 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.0 | Yes |
| Application | sixapart | movable_type | 5.01 | Yes |
| Application | sixapart | movable_type | 5.02 | Yes |
| Application | sixapart | movable_type | 5.03 | Yes |
| Application | sixapart | movable_type | 5.04 | Yes |
| Application | sixapart | movable_type | 5.05 | Yes |
| Application | sixapart | movable_type | 5.031 | Yes |