CVE-2010-1985: XSS
Published May 19, 2010
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
2 affected components
Sixapart Movable Type=5.01
Sixapart Movable Type=5.0
Event History
May 19, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What are the potential impacts of CVE-2010-1985?
CVE-2010-1985 can allow remote attackers to execute arbitrary web scripts or HTML, potentially compromising the security of the administrative interface.
2
How can I mitigate the risks associated with CVE-2010-1985?
To mitigate the risks of CVE-2010-1985, it is recommended to upgrade to Movable Type version 5.02 or later.
3
What versions of Movable Type are affected by CVE-2010-1985?
CVE-2010-1985 affects Movable Type versions 5.0 and 5.01.
4
Is there a patch available for CVE-2010-1985?
Yes, a security update to address CVE-2010-1985 is included in Movable Type version 5.02.
5
Who is affected by CVE-2010-1985?
Any user of Movable Type versions 5.0 and 5.01 who has not yet updated to version 5.02 could be affected by CVE-2010-1985.