Open redirect in Six Apart Ltd products - CVE-2025-55706

Vulnerability identifier: #VU114233

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N]

CVE-ID: CVE-2025-55706

CWE-ID: CWE-601

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to redirect victims to arbitrary URL.

The vulnerability exists due to improper sanitization of user-supplied data. A remote attacker can create a link that leads to a trusted website, however, when clicked, redirects the victim to arbitrary domain.

Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.

Movable Type Premium (Advanced Edition)
Movable Type Advanced
Movable Type Premium
Movable Type
Movable Type Premium Cloud Edition
Movable Type Cloud Edition

Install updates from vendor's website.

Movable Type Premium (Advanced Edition) - addressed in versions 1.67, 2.10
Movable Type Advanced - addressed in versions r.5509, 8.0.7, 8.4.3
Movable Type Premium - addressed in versions 1.67, 2.10
Movable Type - addressed in versions r.5509, 8.0.0, 8.4.3
Movable Type Premium Cloud Edition - addressed in versions 1.67, 2.10
Movable Type Cloud Edition - addressed in versions r.5509, 8.7.0

• https://jvn.jp/en/jp/JVN76729865/index.html
• https://movabletype.org/news/2025/08/mt-843-released.html

• Multiple vulnerabilities in Six Apart Movable Type