Cross-Site Scripting Vulnerability in Movable Type Products

CVE-2020-5528

What is CVE-2020-5528?

A cross-site scripting vulnerability exists in Movable Type products that allows remote attackers to inject arbitrary web scripts or HTML into the block editor and rich text editor. This can be exploited via a specially crafted URL, potentially compromising user data and site integrity. Affected versions include Movable Type 7 r.4603 and earlier, Movable Type 6.5.2 and earlier, and their advanced and premium counterparts, highlighting the importance of upgrading to the latest versions for enhanced security. For more details, you can refer to the official release notes and security advisories.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References