VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 5, 2021· Updated Jun 17, 2026

CVE-2021-20665

CVE-2021-20665

Description

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Movabletype/Movabletype2 versions
    cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*range: <=7.4705
    • (no CPE)range: <=r.4705
  • Movabletype/Movable Type Advanced2 versions
    cpe:2.3:a:movabletype:movable_type_advanced:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:movabletype:movable_type_advanced:*:*:*:*:*:*:*:*range: <=7.4705
    • (no CPE)range: <=r.4705
  • Movabletype/Movable Type Premium2 versions
    cpe:2.3:a:movabletype:movable_type_premium:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:movabletype:movable_type_premium:*:*:*:*:*:*:*:*range: <=1.39
    • (no CPE)range: <=1.39
  • Movabletype/Movable Type Premium Advanced
    cpe:2.3:a:movabletype:movable_type_premium_advanced:*:*:*:*:*:*:*:*
    Range: <=1.39
  • Six Apart Ltd./Movable Typev5
    Range: Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.