Movable Type Stored XSS Vulnerabilities (CVE-2025-54856/CVE-2025-62499) Advisory
Security Advisory
JVN#24333679
Medium
Six Apart Ltd.
Affected:
- Movable Type / Movable Type Advanced 8.4.0 to 8.4.3
- Movable Type / Movable Type Advanced 8.0.0 to 8.0.7
- Movable Type / Movable Type Advanced 7.x ≤ 5509
- Movable Type Premium / Movable Type Premium (Advanced Edition) 2.1.0 and earlier
- Movable Type Premium / Movable Type Premium (Advanced Edition) 1.6.0 and earlier
Fixed in:
- Movable Type / Movable Type Advanced 8.0.8
- Movable Type / Movable Type Advanced 8.4.4
- Movable Type / Movable Type Advanced 7.x ≥ 5510
- Movable Type Premium / Movable Type Premium (Advanced Edition) 2.1.1
- Movable Type Premium / Movable Type Premium (Advanced Edition) 1.6.0
Referenced CVEs:
CVE-2025-62499
CVE-2025-54856
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from jvn.jp, cleaned by our LLM pipeline, and translated to English. View original.