N/A

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of ContentType page.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type是美国Six Apart公司的一个应用系统。提供包含多用户，评论，引用(TrackBack)，主题等功能。 Six Apart Movable Type存在跨站脚本漏洞，该漏洞源于ContentType页面Edit CategorySet中存在存储型跨站脚本漏洞，可能导致执行任意脚本。

N/A

N/A