CVE-2021-20810: XSS
Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.44 and earlier, and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20810?
CVE-2021-20810 is a cross-site scripting vulnerability in the Website Management screen of Movable Type.
Which versions of Movable Type are affected by CVE-2021-20810?
CVE-2021-20810 affects Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), and Movable Type Premium 1.44 and earlier.
What is the severity of CVE-2021-20810?
CVE-2021-20810 has a severity rating of 6.1 (medium).
How can I fix CVE-2021-20810?
To fix CVE-2021-20810, you should update Movable Type to version 7.8.0 or later, 6.8.1 or later, or apply the appropriate patches provided by the vendor.
Where can I find more information about CVE-2021-20810?
You can find more information about CVE-2021-20810 at the following references: [Link 1](https://jvn.jp/en/jp/JVN97545738/index.html) and [Link 2](https://movabletype.org/news/2021/08/mt-780-681-released.html).