CVE-2012-1503

EUVD-2012-1521
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
sixapartmovable_type
5.13
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/show/osvdb/86729
http://packetstormsecurity.org/files/117564/Movable-Type-Pro-5.13en-Cross-Site-Scripting.html
http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html
http://www.exploit-db.com/exploits/22151
http://www.securityfocus.com/bid/56160
https://exchange.xforce.ibmcloud.com/vulnerabilities/79521
http://osvdb.org/show/osvdb/86729
http://packetstormsecurity.org/files/117564/Movable-Type-Pro-5.13en-Cross-Site-Scripting.html
http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html
http://www.exploit-db.com/exploits/22151
http://www.securityfocus.com/bid/56160
https://exchange.xforce.ibmcloud.com/vulnerabilities/79521