CVE-2023-45746

5.4 mediumEPSS 0.4%

Medium (5.4) in sixapart movable type. EPSS 0.4% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-10-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sixapart:movable_type

References

https://jvn.jp/en/jp/JVN39139884/
https://movabletype.org/news/2023/10/mt-79020-released.html
https://jvn.jp/en/jp/JVN39139884/
https://movabletype.org/news/2023/10/mt-79020-released.html

Check your stack JSON