Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-45122

Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Published

2022-12-07T04:15:11.283

Last Modified

2025-04-23T19:16:24.043

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sixapart movable_type ≤ 1.53 Yes
Application sixapart movable_type ≤ 1.53 Yes
Application sixapart movable_type < 6.8.7 Yes
Application sixapart movable_type < 6.8.7 Yes
Application sixapart movable_type < 7.9.6 Yes
Application sixapart movable_type < 7.9.6 Yes
References