CNNVD-202602-742 Information
Feb 04, 2026
cve
CNNVD ID
CNNVD-202602-742
Related CVE
- CNNVD Published: 2026-02-04
Description (Chinese)
Movable Type是Movable Type公司的一个内容管理系统。 Movable Type存在跨站脚本漏洞，该漏洞源于导出站点中存在存储型跨站脚本漏洞，可能导致在已登录用户的Web浏览器上执行任意脚本。
Description (English)
Movable Type is a content management system for Movable Type. Movable Type has a cross-site script loophole, which stems from the existence of a storage cross-site script gap in the export site, which may lead to the execution of any script on the login user’s Web browser.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Movable Type
Published
2026-02-04
Last Modified
2026-02-24
References
https://jvn.jp/en/jp/JVN45405689/ https://www.sixapart.jp/movabletype/news/2026/02/04-1100.html https://movabletype.org/news/2026/02/mt-906-released.html https://access.redhat.com/security/cve/cve-2026-22875
Patch
https://movabletype.org/news/2026/02/mt-906-released.html
Share on: