Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Movable Type
NVD
CVSS 2.0
7.5
EPSS
1.2%