Unscored CVE-2014-5313 EUVD-2014-5204GHSA-fr53-65q5-3wv3

Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to i…

Published Sep 10, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

JVNDB-2014-000104 third-party-advisory
http://jvn.jp/en/jp/JVN73357573/370331/index.html
JVN#73357573 third-party-advisory