Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.
Affected Platforms
Six Apart Movable TypeSixapart Movable TypeSix Apart Ltd Movable Type