Movable Type Unspecified Cross-Site Scripting Vulnerability

Movable Type is prone to an unspecified cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.

Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to 3.34 are affected by this issue.


 

Privacy Statement
Copyright 2010, SecurityFocus