VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Oct 30, 2023· Updated Jun 17, 2026

CVE-2023-45746

CVE-2023-45746

Description

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Movabletype/Movabletype6 versions
    cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*range: <7.902.0
    • cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*range: <7.902.0
    • cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced_aws:*:*:*range: <1.59
    • cpe:2.3:a:sixapart:movable_type:*:*:*:*:aws:*:*:*range: <7.902.0
    • cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*range: <1.59
    • cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*range: <1.59
  • Movabletype/Movable Type Premiumllm-fuzzy
  • Movabletype/Movable Type Advancedllm-fuzzy
  • Movabletype/Movable Type Prollm-fuzzy
  • Six Apart Ltd./Movable Type 7 (Movable Type 7 Series)v5
    Range: r.5405 and earlier
  • Six Apart Ltd./Movable Type Advanced 7 (Movable Type 7 Series)v5
    Range: r.5405 and earlier
  • Six Apart Ltd./Movable Type Cloud Edition (Version 7)v5
    Range: r.5405 and earlier
  • Six Apart Ltd./Movable Type Premiumv5
    Range: 1.58 and earlier
  • Six Apart Ltd./Movable Type Premium Advancedv5
    Range: 1.58 and earlier
  • Six Apart Ltd./Movable Type Premium Cloud Editionv5
    Range: 1.58 and earlier

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.