Cross-Site Scripting Vulnerability in Movable Type by Six Apart
CVE-2021-20815
What is CVE-2021-20815?
A cross-site scripting vulnerability exists in the Edit Boilerplate screen of Movable Type, affecting various versions of Movable Type, Movable Type Advanced, and Movable Type Premium products. This flaw allows remote attackers to inject arbitrary scripts or HTML, potentially leading to malicious actions on users' browsers when they interact with compromised pages. It is crucial for users and administrators to update their installations to mitigate the risks associated with this vulnerability.
Affected Version(s)
Movable Type Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.44 and earlier, and Movable Type Premium Advanced 1.44 and earlier