CVE-2023-45746

Name of the Vulnerable Software and Affected Versions Movable Type versions 7 r.5405 and earlier Movable Type Advanced versions 7 r.5405 and earlier Movable Type Premium version 1.58 and earlier Movable Type Premium Advanced version 1.58 and earlier Movable Type Cloud Edition (Version 7) versions r.5405 and earlier Movable Type Premium Cloud Edition version 1.58 and earlier

Description A cross-site scripting vulnerability in the Movable Type series allows a remote authenticated attacker to inject an arbitrary script.

Recommendations For Movable Type versions 7 r.5405 and earlier, update to a version later than r.5405. For Movable Type Advanced versions 7 r.5405 and earlier, update to a version later than r.5405. For Movable Type Premium version 1.58 and earlier, update to a version later than 1.58. For Movable Type Premium Advanced version 1.58 and earlier, update to a version later than 1.58. For Movable Type Cloud Edition (Version 7) versions r.5405 and earlier, update to a version later than r.5405. For Movable Type Premium Cloud Edition version 1.58 and earlier, update to a version later than 1.58.