CVE-2021-20664: XSS
Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20664?
CVE-2021-20664 has a moderate severity rating due to its potential impact on user security through cross-site scripting.
How do I fix CVE-2021-20664?
Fix CVE-2021-20664 by updating Movable Type to version 7.6.0 or later, which addresses the vulnerability.
Which versions are affected by CVE-2021-20664?
CVE-2021-20664 affects Movable Type versions 6.7.5 and earlier, as well as certain versions in the Movable Type 7 Series up to 7.4705.
What type of vulnerability is CVE-2021-20664?
CVE-2021-20664 is a cross-site scripting (XSS) vulnerability that can potentially allow an attacker to execute scripts in a user's browser.
Is CVE-2021-20664 present in Movable Type Premium?
Yes, CVE-2021-20664 is present in Movable Type Premium versions up to 1.39.