CVE-2022-45122

Published: Dec 7, 2022Modified: Apr 23, 2025

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Affected (6)

Products: Sixapart: Movable Type

Sixapart

1 product

Movable Type

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Sixapart Movable Type	From 6.0 to 6.8.7
Sixapart Movable Type	From 7.0 to 7.9.6
Sixapart Movable Type	From 6.0 to 6.8.7
Sixapart Movable Type	From 7.0 to 7.9.6
Sixapart Movable Type	Up to 1.53
Sixapart Movable Type	Up to 1.53