A vulnerability was found in Six Apart Movable Type, Movable Type Advanced and Movable Type Premium 8.4. It has been declared as problematic. The impacted element is an unknown function of the component Export Sites. Such manipulation leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is uniquely identified as CVE-2026-22875. The attack can be launched remotely. No exploit exists.