CVE-2008-4634: Six Apart Movable Type

Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079.

Affected products

• Six Apart Movable Type: version 4 only; version 4.20 only

Published 2008-10-21. Last modified 2026-06-16.