CVE-2021-20811: XSS
Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.44 and earlier, and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20811?
CVE-2021-20811 is a cross-site scripting vulnerability in the List of Assets screen of Movable Type.
What software versions are affected by CVE-2021-20811?
Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.44 and earlier.
What is the severity of CVE-2021-20811?
CVE-2021-20811 has a severity rating of medium.
How can I fix CVE-2021-20811?
To fix CVE-2021-20811, update your Movable Type software to version 7.8.0 or 6.8.1, depending on your series.
Where can I find more information about CVE-2021-20811?
You can find more information about CVE-2021-20811 on the official Movable Type website or the JPCERT/CC Vulnerability Database.