Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploitable when TinyMCE6 is used as a rich text editor and an arbitrary script may be executed on a logged-in user's web browser.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Movable Type (8.4.x series)
Vendor
Six Apart Ltd.
Product
Movable Type (8.4.x series)
Platforms
Unknown
Default status
Unknown
Movable Type (8.4.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.4.1 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type (8.0.x series)
Vendor
Six Apart Ltd.
Product
Movable Type (8.0.x series)
Platforms
Unknown
Default status
Unknown
Movable Type (8.0.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.5 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Advanced (8.4.x series)
Vendor
Six Apart Ltd.
Product
Movable Type Advanced (8.4.x series)
Platforms
Unknown
Default status
Unknown
Movable Type Advanced (8.4.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.4.1 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Advanced (8.0.x series)
Vendor
Six Apart Ltd.
Product
Movable Type Advanced (8.0.x series)
Platforms
Unknown
Default status
Unknown
Movable Type Advanced (8.0.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.5 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (2.x series)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (2.x series)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (2.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.06 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Advanced Edition) (2.x series)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Advanced Edition) (2.x series)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Advanced Edition) (2.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.06 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Cloud Edition (8.x series)
Vendor
Six Apart Ltd.
Product
Movable Type Cloud Edition (8.x series)
Platforms
Unknown
Default status
Unknown
Movable Type Cloud Edition (8.x series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.4.1 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium Cloud Edition (2.x series)
Vendor
Six Apart Ltd.
Product
Movable Type Premium Cloud Edition (2.x series)
Platforms
Unknown
Default status
Unknown
Movable Type Premium Cloud Edition (2.x series) · Scoped product and version facts