A vulnerability was found in Six Apart Movable Type, Movable Type Advanced, Movable Type Premium, Movable Type Cloud Edition and Movable Type Premium Cloud Edition. It has been classified as problematic. Affected is an unknown function of the component Multi-Factor Authentication Plugin. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2025-25054. It is possible to launch the attack remotely. There is no exploit available.
