Loading
Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Use CWE-79, Sixapart vendor hub and Movable Type product page to widen CVE-2011-5084 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2022-38078, CVE-2021-20837 and CVE-2026-25776 for nearby disclosures in the same product family.