NetSight
IP …
medium4.3

CVE-2011-4274

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web sc…

Impact

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.

Affected products

VendorProductAffected versions
Ark-WebA-Form Pc
through 3.0
Ark-WebA-Form Pc Mobile
through 3.0

Weakness classification

CWE-79

References