Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Movable Type Comment Form HTML代码注入漏洞
Vulnerability Description
Movable Type 2.6以前版本和其他可能包含2.63的版本存在跨站脚本攻击(XSS)漏洞。可能当“允许评论HTML吗?”选项已启用时,远程攻击者可以借助Name文本插入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A