Unscored CVE-2009-2492 EUVD-2009-2487GHSA-cvj4-9f98-hhj7

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrar…

Published Jul 17, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.

References

JVNDB-2009-000042 third-party-advisory
35885 vdb-entry
JVN#86472161 third-party-advisory
35534 third-party-advisory
ADV-2009-1668 vdb-entry