CVE-2007-0604: XSS
Published Jan 30, 2007
·Updated
Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the "comment entry screen," a different vulnerability than CVE-2007-0231.
Affected Software
1 affected component
Six Apart Ltd Movable Type<=3.33
Event History
Jan 30, 2007
CVE Published
06:28 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0604?
CVE-2007-0604 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2007-0604?
To fix CVE-2007-0604, upgrade Movable Type to version 3.34 or later.
3
What type of vulnerability is CVE-2007-0604?
CVE-2007-0604 is a cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2007-0604?
Users of Movable Type versions prior to 3.34 are affected by CVE-2007-0604.
5
What can attackers do with CVE-2007-0604?
Attackers can exploit CVE-2007-0604 to inject arbitrary web scripts or HTML into the comment entry screen.