PT-2022-27408
CVE-2022-45122
·
تاريخ النشر
2022-12-07
·
تاريخ التحديث
2022-12-12
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Movable Type versions 7 r.5301 and earlier
Movable Type Advanced versions 7 r.5301 and earlier
Movable Type versions 6.8.7 and earlier
Movable Type Advanced versions 6.8.7 and earlier
Movable Type Premium version 1.53 and earlier
Movable Type Premium Advanced version 1.53 and earlier
Description
A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script.
Recommendations
For Movable Type versions 7 r.5301 and earlier, update to a version later than 7 r.5301.
For Movable Type Advanced versions 7 r.5301 and earlier, update to a version later than 7 r.5301.
For Movable Type versions 6.8.7 and earlier, update to a version later than 6.8.7.
For Movable Type Advanced versions 6.8.7 and earlier, update to a version later than 6.8.7.
For Movable Type Premium version 1.53 and earlier, update to a version later than 1.53.
For Movable Type Premium Advanced version 1.53 and earlier, update to a version later than 1.53.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾