CVE-2020-5574: Medium severity six apart movable type vulnerability
Published May 14, 2020
·Updated
HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary HTML attribute value via unspecified vectors.
Affected Software
9 affected components
Sixapart Movable Type<=1.29
Sixapart Movable Type<=1.29
Sixapart Movable Type>=6.3<=6.3.11
Sixapart Movable Type>=6.3<=6.3.11
Sixapart Movable Type>=6.5.0<=6.5.3
Sixapart Movable Type>=6.5.0<=6.5.3
Sixapart Movable Type Aws>=7.0<=7.2.1
Sixapart Movable Type>=7.0<=7.2.1
Sixapart Movable Type>=7.0<=7.2.1
Event History
May 14, 2020
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionWeakness