CVE-2012-2644

2012-07-0710:00:00

jpcert

www.cve.org

mt4i

xss

vulnerability

movable type

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2642.

References

jvn.jp/en/jp/JVN79111101/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000069

www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1