Логотип exploitDog
bind:CVE-2025-25054
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-25054

Количество 4

Количество 4

ubuntu логотип

CVE-2025-25054

12 месяцев назад

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-25054

12 месяцев назад

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-25054

12 месяцев назад

Movable Type contains a reflected cross-site scripting vulnerability i ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-qj2g-cp58-9mf6

12 месяцев назад

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-25054

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.

CVSS3: 6.1
0%
Низкий
12 месяцев назад
nvd логотип
CVE-2025-25054

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.

CVSS3: 6.1
0%
Низкий
12 месяцев назад
debian логотип
CVE-2025-25054

Movable Type contains a reflected cross-site scripting vulnerability i ...

CVSS3: 6.1
0%
Низкий
12 месяцев назад
github логотип
GHSA-qj2g-cp58-9mf6

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.

CVSS3: 6.1
0%
Низкий
12 месяцев назад

Уязвимостей на страницу