CVEvulnerability

CVE-2021-20664

6.1 MEDIUM Published 2021-03-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

Affected configurations

• movabletype movable type (<= 6.7.5) • movabletype movable type (>= 7.0000 <= 7.4705) • movabletype movable type advanced (<= 7.4705) • movabletype movable type premium (<= 1.39) • movabletype movable type premium advanced (<= 1.39)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References