Movable Type r.5005 (7.9.1) Release Notes
This version of Movable Type was released December 16, 2021.
This versions fixed a security issue.
- Fixed additionally the OS command injection vulnerability via XMLRPC API (CVE-2021-20837, JVN#41119755)
This additional issue was reported by Chatwork Co., Ltd. This original issue was reported by Étienne Gervais and Charl-Alexandre Le Brun. We appreciate your cooperation!