We are releasing Movable Type 6.0.1, 5.2.9, and 5.161 as mandatory security updates. These updates resolve multiple security-related issues discovered in all previous versions of Movable Type 6 and Movable Type 5.Details of the Security UpdatesThe Rich Text Editor in previous versions of Movable Type 6 and Movable Type 5 are susceptible to cross-site scripting (XSS) attacks. A remote attacker can inject JavaScript into a page or entry in a Movable Type blog or website. This JavaScript can be executed on the client browser when that page or entry is subsequently displayed in the Rich Text Ed
...
继续阅读
(114)