Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Movable Type (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.4.0 to 8.4.3 (8.4 series)
affected
Unavailable
Unavailable
Unavailable
None listed
8.0.0 to 8.0.7 (8.0 series)
affected
Unavailable
Unavailable
Unavailable
None listed
7 r.5509 and earlier (7 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Advanced (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Advanced (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Advanced (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.4.0 to 8.4.3 (8.4 series)
affected
Unavailable
Unavailable
Unavailable
None listed
8.0.0 to 8.0.7 (8.0 series)
affected
Unavailable
Unavailable
Unavailable
None listed
7 r.5509 and earlier (7 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.10 and earlier (2 series)
affected
Unavailable
Unavailable
Unavailable
None listed
1.67 and earlier (1 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Advanced Edition) (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Advanced Edition) (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Advanced Edition) (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.10 and earlier (2 series)
affected
Unavailable
Unavailable
Unavailable
None listed
1.67 and earlier (1 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type (Cloud Edition)
Vendor
Six Apart Ltd.
Product
Movable Type (Cloud Edition)
Platforms
Unknown
Default status
Unknown
Movable Type (Cloud Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.7.0 (8 series)
affected
Unavailable
Unavailable
Unavailable
None listed
7 r.5509 (7 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Cloud Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Cloud Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Cloud Edition) · Scoped product and version facts