Back to Database
Status published
Medium
CVE-2020-5669
Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37...
Vulnerability Description
Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5669
Credits & Attribution
No credits recorded in the NVD database.
References
More from Six Apart Ltd.
View All →CVE-2025-62499
Movable Type contains a stored cross-site scripting vulnerability in Edit...
Medium
4.6
CVE-2025-55706
URL redirection to untrusted site ('Open Redirect') issue exists...
Medium
5.1
CVE-2025-54856
Movable Type contains a stored cross-site scripting vulnerability in Edit...
Medium
4.6
CVE-2025-53522
Movable Type contains an issue with use of less trusted...
Medium
6.9
CVE-2025-25054
Movable Type contains a reflected cross-site scripting vulnerability in the...
Medium
6.1
Affected Vendor
Six Apart Ltd.
View all reports →Affected Software
Movable Type
Vulnerable Versions:
Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier
Timeline
Official Publish:
October 26th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.