| Package | Affected versions | Patched versions |
|---|---|---|
| a-form | < 3.9.1< 4.1.1 | 3.9.14.1.1 |
Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free