CVE-2021-20814
CVE-2021-20814
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
26 ago 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), and Movable Type Premium 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Productos afectados
Six Apart Ltd. · Movable Type¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →