Back to Database
Status published
Medium
CVE-2025-55706
URL redirection to untrusted site ('Open Redirect') issue exists...
Vulnerability Description
URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55706
Credits & Attribution
No credits recorded in the NVD database.
References
More from Six Apart Ltd.
View All →CVE-2025-62499
Movable Type contains a stored cross-site scripting vulnerability in Edit...
Medium
4.6
CVE-2025-54856
Movable Type contains a stored cross-site scripting vulnerability in Edit...
Medium
4.6
CVE-2025-53522
Movable Type contains an issue with use of less trusted...
Medium
6.9
CVE-2025-25054
Movable Type contains a reflected cross-site scripting vulnerability in the...
Medium
6.1
CVE-2025-24841
Movable Type contains a stored cross-site scripting vulnerability in the...
Medium
5.4
Affected Vendor
Six Apart Ltd.
View all reports →Affected Software
Movable Type (Software Edition), Movable Type Advanced (Software Edition), Movable Type Premium (Software Edition), Movable Type Premium (Advanced Edition) (Software Edition), Movable Type (Cloud Edition), Movable Type Premium (Cloud Edition)
Vulnerable Versions:
8.0.0 to 8.0.6, 8.4.0 to 8.4.2 (8 series), 7 r.5508 and earlier (7 series), 2.09 and earlier (2 series), 1.66 and earlier (1 series), 8.6.0 (8 series), 7 r.5508 (7 series), 2.09 (2 series), 1.66 (1 series)
Timeline
Official Publish:
August 20th, 2025
Last Modified:
August 20th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N