PT-2022-27408
CVE-2022-45122
·
Published
2022-12-07
·
Updated
2022-12-12
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Movable Type versions 7 r.5301 and earlier
Movable Type Advanced versions 7 r.5301 and earlier
Movable Type versions 6.8.7 and earlier
Movable Type Advanced versions 6.8.7 and earlier
Movable Type Premium version 1.53 and earlier
Movable Type Premium Advanced version 1.53 and earlier
Description
A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script.
Recommendations
For Movable Type versions 7 r.5301 and earlier, update to a version later than 7 r.5301.
For Movable Type Advanced versions 7 r.5301 and earlier, update to a version later than 7 r.5301.
For Movable Type versions 6.8.7 and earlier, update to a version later than 6.8.7.
For Movable Type Advanced versions 6.8.7 and earlier, update to a version later than 6.8.7.
For Movable Type Premium version 1.53 and earlier, update to a version later than 1.53.
For Movable Type Premium Advanced version 1.53 and earlier, update to a version later than 1.53.
Found an issue in the description? Have something to add? Feel free to write us 👾