CVE-2006-5080: Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and...

Security readout for executives and security teams

CVE-2006-5080 is a cross-site scripting issue in the search feature of older Six Apart Movable Type releases. A remote attacker could cause malicious script or HTML to run in a user's browser. Business urgency depends on whether legacy Movable Type search pages remain exposed. Exposure is most likely on internet-facing legacy Movable Type or Movable Type Enterprise installations that still run the affected versions and expose search functionality. Modern or upgraded deployments are not shown as affected by the provided sources. Prioritize remediation if legacy Movable Type search is internet-facing or tied to authenticated business users. If no affected versions exist, document the finding as not applicable. The age of the software increases operational risk if still deployed. Mitigation focus: Inventory Movable Type and Movable Type Enterprise versions across public sites.; Review Six Apart's MT 3.33 and MTE 1.03 update advisory.; Upgrade or retire affected legacy installations when vendor guidance confirms applicability..

Prepared

Jun 29, 2026, 10:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.