CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3921

Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-3921

Sixapart » Movabletype » Version: 4.0

cpe:2.3:a:sixapart:movabletype:4.0
Sixapart » Movabletype » Version: 4.1

cpe:2.3:a:sixapart:movabletype:4.1
Sixapart » Movabletype » Version: 4.2

cpe:2.3:a:sixapart:movabletype:4.2
Sixapart » Movabletype » Version: 4.23

cpe:2.3:a:sixapart:movabletype:4.23
Sixapart » Movabletype » Version: 4.25

cpe:2.3:a:sixapart:movabletype:4.25
Sixapart » Movabletype » Version: 4.26

cpe:2.3:a:sixapart:movabletype:4.26
Sixapart » Movabletype » Version: 4.261

cpe:2.3:a:sixapart:movabletype:4.261
Sixapart » Movabletype » Version: 4.3

cpe:2.3:a:sixapart:movabletype:4.3
Sixapart » Movabletype » Version: 4.31

cpe:2.3:a:sixapart:movabletype:4.31
Sixapart » Movabletype » Version: 4.32

cpe:2.3:a:sixapart:movabletype:4.32
Sixapart » Movabletype » Version: 4.33

cpe:2.3:a:sixapart:movabletype:4.33
Sixapart » Movabletype » Version: 4.34

cpe:2.3:a:sixapart:movabletype:4.34
Sixapart » Movabletype » Version: 5.0

cpe:2.3:a:sixapart:movabletype:5.0
Sixapart » Movabletype » Version: 5.01

cpe:2.3:a:sixapart:movabletype:5.01
Sixapart » Movabletype » Version: 5.02

cpe:2.3:a:sixapart:movabletype:5.02
Sixapart » Movabletype » Version: 5.03

cpe:2.3:a:sixapart:movabletype:5.03
Sixapart » Movabletype » Version: 5.031

cpe:2.3:a:sixapart:movabletype:5.031

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3921

Products

Pricing

Contact Us