Security Advisory

CVE-2025-22888

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-19 05:52:02
Last updated 2025-02-19 14:54:27
Assigner jpcert
State PUBLISHED

Description

Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in users web browser.