CVE-2014-5313
10.09.2014, 10:55
Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| sixapart | movabletype | 𝑥 ≤ 5.14 |
| sixapart | movabletype | 5.04 |
| sixapart | movabletype | 5.11 |
| sixapart | movabletype | 5.12 |
| sixapart | movabletype | 5.13 |
𝑥
= Vulnerable software versions
Ubuntu Releases