Movable Type 8.0.7 Release Notes

This release is internal only, and will be included to the future version 8.8.0.

New and improved features

• Updated bundled plugin MTBlockEditor from version 1.2.5 to 1.2.7 (MTC-30425)
  
  • Fixed an issue where captions in the Image block were displayed as encoded text after saving; corrected to display them unencoded (MTC-30068)
  • Fixed the issue where content CSS files set with relative paths were not applied; enabled correct application in MTBlockEditor as well (MTC-30045)
  • Fixed the issue where the initial value of the image insertion option was unset when “left” or “right” was selected in the image insertion position option of site posting settings (MTC-28893)
  • Fixed an issue where, when changing the selected asset in Image block or File block, if an image other than the latest 25 was selected, the modal window would not operate correctly (MTC-30421)
  • Fixed an issue where, when saving or previewing with focus remaining on the Block Editor editing area, asynchronously updated information would not be reflected (MTC-30496)

Security fixes and improvements

• Fixed an issue where manipulation of the HTTP request Host header could lead to redirection to malicious sites (MTC-30358) (CVE-2025-53522)
  • Allowed setting trusted hostnames via the configuration directive TrustedHosts
• Improved the password reset screen to reject invalid parameters (MTC-30384)(CVE-2025-55706)

Checksums

• MT-8.0.7 SHA1,SHA256
• MTA-8.0.7 SHA1,SHA256