CVE-2025-24841

creationtimestamp| type| source ---|---|--- 2025-02-19 06:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lij4susbex23 2025-02-19 08:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijcz5ag5u2a 2025-02-19 08:38:49+00:00| seen|...

CVE-2025-24841

Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploitable when TinyMCE6 is used as a rich text editor and an arbitrary script may be executed on a logged-in user's web browser...

CVE-2025-24841

CVE-2025-24841 — Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of the MT Block Editor, exploitable when TinyMCE6 is used as the rich text editor. The issue allows arbitrary script execution in a logged-in user’s browser. Sources describe affected products...