Security Advisory
CVE-2010-1985
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.