CVE-2026-24447

Movable Type 7.x and 8.4.x are affected by CVE-2026-24447. A flaw in CSV handling allows specially crafted input data to produce a malicious CSV file that, when opened by a user, can execute code in the user’s environment. The PT-2026-6193 entry explicitly identifies Movable Type 7.x and 8.4.x (n...