VulnerabilityModified
CVE-2003-0287
Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is…
MEDIUM 6.8EPSS 1.32%
Does this matter?
Lower severity and a low EPSS score (1.32%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.32% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- six apart/movable type
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=105276879622636&w=2
- http://marc.info/?l=bugtraq&m=105277690132079&w=2
- http://marc.info/?l=bugtraq&m=105284589927655&w=2
- http://www.securityfocus.com/bid/7560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12003
- http://marc.info/?l=bugtraq&m=105276879622636&w=2
- http://marc.info/?l=bugtraq&m=105277690132079&w=2
- http://marc.info/?l=bugtraq&m=105284589927655&w=2
- http://www.securityfocus.com/bid/7560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12003
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.