Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Movable Type 7 (Movable Type 7 Series)
Vendor
Six Apart Ltd.
Product
Movable Type 7 (Movable Type 7 Series)
Platforms
Unknown
Default status
Unknown
Movable Type 7 (Movable Type 7 Series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
r.5405 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Advanced 7 (Movable Type 7 Series)
Vendor
Six Apart Ltd.
Product
Movable Type Advanced 7 (Movable Type 7 Series)
Platforms
Unknown
Default status
Unknown
Movable Type Advanced 7 (Movable Type 7 Series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
r.5405 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium
Vendor
Six Apart Ltd.
Product
Movable Type Premium
Platforms
Unknown
Default status
Unknown
Movable Type Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.58 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium Advanced
Vendor
Six Apart Ltd.
Product
Movable Type Premium Advanced
Platforms
Unknown
Default status
Unknown
Movable Type Premium Advanced · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.58 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Cloud Edition (Version 7)
Vendor
Six Apart Ltd.
Product
Movable Type Cloud Edition (Version 7)
Platforms
Unknown
Default status
Unknown
Movable Type Cloud Edition (Version 7) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
r.5405 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium Cloud Edition
Vendor
Six Apart Ltd.
Product
Movable Type Premium Cloud Edition
Platforms
Unknown
Default status
Unknown
Movable Type Premium Cloud Edition · Scoped product and version facts