Description
Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- JVNDB-2010-000060 third-party-advisory
- 1024833 vdb-entry
- ADV-2010-3145 vdb-entry
- 42539 third-party-advisory
- http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html
- JVN#36673836 third-party-advisory