Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of ContentType page.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 23 Oct 2025 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit CategorySet of ContentType page. | |
| Weaknesses | CWE-79 | |
| References |
| |
| Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: jpcert
Published:
Updated: 2025-10-23T04:10:41.403Z
Reserved: 2025-10-16T00:31:59.185Z
Link: CVE-2025-62499
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-23T05:15:32.900
Modified: 2025-10-23T05:15:32.900
Link: CVE-2025-62499
Redhat
No data.
OpenCVE Enrichment
No data.