VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 21, 2007· Updated Jun 16, 2026

CVE-2007-3342

CVE-2007-3342

Description

Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a malformed SGML numeric character reference with a '\0' (0x00) character in a javascript: URI or (2) an attribute in an element that lacks the '>' character at the end of the start tag, a different vulnerability than CVE-2007-0231.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Movabletype/Movabletype2 versions
    cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:*range: <=3.33
    • (no CPE)range: < 3.34

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.