CVE-2008-4079: XSS
Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Solution allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4079?
CVE-2008-4079 is considered a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2008-4079?
To fix CVE-2008-4079, update Movable Type to version 4.21 or later which contains patches for this vulnerability.
What software is affected by CVE-2008-4079?
CVE-2008-4079 affects Movable Type versions 4.x up to 4.20, and 3.36 and earlier versions.
How can CVE-2008-4079 be exploited?
CVE-2008-4079 can be exploited by attackers injecting arbitrary web scripts or HTML through unspecified vectors.
Is CVE-2008-4079 a common vulnerability?
Yes, CVE-2008-4079 is a recognized cross-site scripting vulnerability that has affected various users of Movable Type since its disclosure.