Movable Type 6.8.8 Release Notes
This version of Movable Type was released November 16, 2022.
Movable Type 6.8.8 Release Notes. This version includes security fixes.
- [MTC-28560] Fixed Cross Site Scripting (XSS) in Google Analytics plugin (CVE-2022-45122)
- [MTC-28559] Fixed Open Redirect issue on the password reset page (CVE-2022-45113)
We would like to thank all those who have reported bugs and requested features for the release. In particular, we would like to thank the following people individually.
- [MTC-28559], [MTC-28560] SHIGA TAKUMA of BroadBand Security, Inc., IPA and JPCERT/CC for their cooperation in handling the vulnerability information