CVE-2012-0318 - CVE House
Back to Database
Status published Medium CVE-2012-0318

Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38,...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to inject arbitrary web script or HTML via vectors involving templates, a different issue than CVE-2012-1262.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-0318

Credits & Attribution

No credits recorded in the NVD database.

References

More from movabletype

View All →
CVE-2012-1497
The default configuration of Movable Type before 4.38, 5.0x before...
Medium 4
CVE-2012-1262
Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before...
Medium 4.3
CVE-2012-0319
The file-management system in Movable Type before 4.38, 5.0x before...
Medium 6.5
CVE-2009-2480
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable...
Medium 4.3

Affected Vendor

movabletype

View all reports →

Affected Software

movable type open source, movable type enterprise, movable type advanced, movable type pro
Vulnerable Versions:
0, 4.0, 4.1, 4.01, 4.2, 4.3, 4.23, 4.25, 4.26, 4.31, 4.32, 4.33, 4.34, 4.35, 4.36, 4.261, 4.361, 5.1, 5.02, 5.03, 5.04, 5.05, 5.06, 5.11, 5.12, 5.031, 5.051

Timeline

Official Publish: March 3rd, 2012
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.