CVE-2021-20812

CVE-2021-20812: vulnerability in Six Apart Ltd. Movable Type

Published · Updated

Follow this CVE+ Monitor Movable Type

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series) and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Affected products
Six Apart Ltd. · Movable Type
Related CVEs — Six Apart Ltd. Movable Type

In the same product, most dangerous first.

CVE-2021-20837—CVE-2021-20837EPSS 88.1%CVE-2020-5577—CVE-2020-5577EPSS 1.7%CVE-2020-5574—CVE-2020-5574EPSS 1.2%CVE-2022-43660HIGHCVE-2022-43660EPSS 1.0%CVE-2020-5575—CVE-2020-5575EPSS 0.9%CVE-2021-20814—CVE-2021-20814EPSS 0.9%