Cross-Site Scripting Vulnerability in Movable Type Products by Movable Type

CVE-2023-45746

What is CVE-2023-45746?

A cross-site scripting vulnerability exists in the Movable Type series that enables a remote authenticated attacker to inject arbitrary scripts. This could lead to the manipulation of user sessions or theft of sensitive information. Affected versions include several iterations of Movable Type, with critical updates required to mitigate these risks. The vulnerability affects Movable Type 7 r.5405 and earlier, Movable Type Advanced 7 r.5405 and earlier, as well as multiple Premium and Cloud editions of the software.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References