Six Apart Movable Type (MT) is a blogging system from Six Apart, Inc. A cross-site scripting vulnerability exists in Six Apart Movable Type due to a lack of validation and escaping of user-supplied data in the “Create Entry, Page and Content Type” interface, which could be exploited by remote attackers to Unspecified vectors to inject arbitrary script or HTML.
CPE | Name | Operator | Version |
---|---|---|---|
six apart movable type | le | 6.8.0 | |
six apart movable type premium | le | 1.44 | |
six apart movable type premium advanced | le | 1.44 |