Description
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- JVN#68295640 third-party-advisory
- movabletype-search-xss(29183) vdb-entry
- 29177 vdb-entry
- 22109 third-party-advisory
- ADV-2006-3779 vdb-entry
- 20228 vdb-entry
- http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html