Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's web browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-21393 Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an attacker, arbitrary script may be executed on a lo… https://www.cve.org/CVERecord?id=CVE-2026-21393
Post summary
The post announces a stored XSS flaw in Movable Type’s Edit Comment that could allow arbitrary script execution, without mentioning any PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-21393 Stored Cross-Site Scripting Vulnerability in Movable Type Edit Comment Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21393
Post summary
CVE-2026-21393 is a stored cross‑site scripting vulnerability in the Edit Comment feature of Movable Type, with no PoC, exploit code, active exploitation, or patch mentioned in the text.