XSS in Sixapart Movable_type
CVE-2020-5575
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Sixapart Movable_type
- Six Apart Ltd. Movable Type — versions Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_MISC, Release Notes, Vendor Advisory)
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-5575?
- CVE-2020-5575 is a medium-severity vulnerability in Sixapart Movable_type, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-05-14.
- How severe is CVE-2020-5575?
- Medium severity. CVSS v3 base score is 6.1 out of 10.