Six Apart Ltd. Movable Type Advanced (8.0.x Series)
3 CVEs affecting Six Apart Ltd. Movable Type Advanced (8.0.x Series). Latest disclosed: 2025-02-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25054 | Medium | 6.1 | 2025-02-19 | Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and… |
CVE-2025-24841 | Medium | 5.4 | 2025-02-19 | Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploitable when TinyMCE6 is used as a rich t… |
CVE-2025-22888 | Medium | 5.4 | 2025-02-19 | Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be ex… |