Description
Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- JVN#60887968 third-party-advisory
- movabletype-mailform-xss(72344) vdb-entry
- http://www.h-fj.com/blog/archives/2007/01/23-111038.php
- JVNDB-2011-000108 third-party-advisory