Movable Type 存储型XSS漏洞 (CVE-2025-54856/CVE-2025-62499) 安全公告
Security Advisory
JVN#24333679
Medium
Six Apart Ltd.
Affected:
- Movable Type / Movable Type Advanced 8.4.0 to 8.4.3
- Movable Type / Movable Type Advanced 8.0.0 to 8.0.7
- Movable Type / Movable Type Advanced 7.x ≤ 5509
- Movable Type Premium / Movable Type Premium (Advanced Edition) 2.1.0 and earlier
- Movable Type Premium / Movable Type Premium (Advanced Edition) 1.6.0 and earlier
Fixed in:
- Movable Type / Movable Type Advanced 8.0.8
- Movable Type / Movable Type Advanced 8.4.4
- Movable Type / Movable Type Advanced 7.x ≥ 5510
- Movable Type Premium / Movable Type Premium (Advanced Edition) 2.1.1
- Movable Type Premium / Movable Type Premium (Advanced Edition) 1.6.0
Referenced CVEs:
CVE-2025-62499
CVE-2025-54856
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档