CVE-2025-22888 | Six Apart Movable Type MT Block Editor cross site scripting

A vulnerability was found in Six Apart Movable Type, Movable Type Advanced, Movable Type Premium, Movable Type Cloud Edition and Movable Type Premium Cloud Edition. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MT Block Editor. The manipulation leads to cross site scripting.

This vulnerability is known as CVE-2025-22888. The attack can be launched remotely. There is no exploit available.