system
Describe <CVE-2009-2480>.
user
What is <CVE-2009-2480>?
assistant
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors..