CVE-2011-4274

ark-web a-form_pc and a-form_pc_mobile < 3.0 - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/70405

Scores

EPSS 0.0104
EPSS Percentile 60.2%

Details

CWE
CWE-79
Status published
Products (2)
ark-web/a-form_pc < 3.0
ark-web/a-form_pc_mobile < 3.0
Published Nov 03, 2011
Tracked Since Feb 18, 2026