← Database

CVE-2009-2480

MEDIUM CVSS: 4.3 Published: 2009-07-16 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Platforms

Movabletype Six Apart Movable Type

Weakness Type

CWE-79

References