CVE-2025-22888

Publication date

2025-02-19 05:52:02

Family

jpcert

State

PUBLISHED

Description

Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in users web browser.