CVE-2021-20665

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

• CWE-79

• https://jvn.jp/en/jp/JVN66542874/index.htmlThird Party Advisory
• https://movabletype.org/news/2021/02/mt-760-676-released.htmlRelease Notes, Vendor Advisory
• https://jvn.jp/en/jp/JVN66542874/index.htmlThird Party Advisory
• https://movabletype.org/news/2021/02/mt-760-676-released.htmlRelease Notes, Vendor Advisory

Published

Mar 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-2066Vulnerability in the Oracle Outside In Technology product of…8.6
• CVE-2021-20660Cross-site scripting vulnerability in SolarView Compact SV-C…6.1
• CVE-2021-20661Directory traversal vulnerability in SolarView Compact SV-CP…8.1
• CVE-2021-20662Missing authentication for critical function in SolarView Co…7.5
• CVE-2021-20663Cross-site scripting vulnerability in in Role authority sett…6.1
• CVE-2021-20664Cross-site scripting vulnerability in in Asset registration …6.1
• CVE-2021-20667Stored cross-site scripting vulnerability due to inadequate …5.4
• CVE-2021-20668Path traversal vulnerability in GROWI versions v4.2.2 and ea…2.7
• CVE-2021-20669Path traversal vulnerability in GROWI versions v4.2.2 and ea…4.7
• CVE-2021-2067Vulnerability in the Oracle Outside In Technology product of…8.6
• CVE-2021-20670Improper access control vulnerability in GROWI versions v4.2…7.5
• CVE-2021-20671Invalid file validation on the upload feature in GROWI versi…7.2