CVE-2025-54856

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page.

Metrics

CVSS 4.0 4.6/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Six Apart Ltd.	Movable Type (Software Edition)	8.4.0 to 8.4.3 (8.4 series); 8.0.0 to 8.0.7 (8.0 series); 7 r.5509 and earlier (7 series)
Six Apart Ltd.	Movable Type Advanced (Software Edition)	8.4.0 to 8.4.3 (8.4 series); 8.0.0 to 8.0.7 (8.0 series); 7 r.5509 and earlier (7 series)
Six Apart Ltd.	Movable Type Premium (Software Edition)	2.10 and earlier (2 series); 1.67 and earlier (1 series)
Six Apart Ltd.	Movable Type Premium (Advanced Edition) (Software Edition)	2.10 and earlier (2 series); 1.67 and earlier (1 series)
Six Apart Ltd.	Movable Type (Cloud Edition)	8.7.0 (8 series); 7 r.5509 (7 series)
Six Apart Ltd.	Movable Type Premium (Cloud Edition)	2.10 (2 series); 1.67 (1 series)

References

Timeline

Published: Oct 23, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-548579.3Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 CVE-2025-548587.5When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the CVE-2025-548594.6Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s we CVE-2025-54869.8The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the WPMDBUG_handle_settin CVE-2025-548607.7Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on t CVE-2025-548615.4A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specia CVE-2025-548625.4Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user CVE-2025-548639.8Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows att CVE-2025-548647.5Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called b CVE-2025-548659.8Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a quer CVE-2025-548665.5Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing CVE-2025-548677.0Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potential