Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xch-xp63-gcvw

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 5.4

Описание

Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's web browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well.

Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's web browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well.

EPSS

Процентиль: 1%
0.0001
Низкий

4.8 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
3 дня назад

Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's web browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well.

CVSS3: 5.4
debian
3 дня назад

Movable Type contains a stored cross-site scripting vulnerability in E ...

EPSS

Процентиль: 1%
0.0001
Низкий

4.8 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79