Movable Type 6.8.8 Release Notes

This version of Movable Type was released November 16, 2022.

Movable Type 6.8.8 Release Notes. This version includes security fixes.

Security issues

• [MTC-28560] Fixed Cross Site Scripting (XSS) in Google Analytics plugin (CVE-2022-45122)
• [MTC-28559] Fixed Open Redirect issue on the password reset page (CVE-2022-45113)

Acknowledgement

We would like to thank all those who have reported bugs and requested features for the release. In particular, we would like to thank the following people individually.

• [MTC-28559], [MTC-28560] SHIGA TAKUMA of BroadBand Security, Inc., IPA and JPCERT/CC for their cooperation in handling the vulnerability information