CVE-2011-4274: Ark-Web A-Form Pc

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.

Affected products

• Ark-Web A-Form Pc: up to and including 3.0
• Ark-Web A-Form Pc Mobile: up to and including 3.0

Published 2011-11-03. Last modified 2026-06-16.