CVE-2011-3994: Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.4...

Security readout for executives and security teams

This is an older CSRF issue affecting SKYARC MTCMS and several Movable Type plugins. If an authenticated user is tricked into making an unintended request, data in the CMS could be changed under that user’s permissions. Public scoring and active-exploitation evidence are not provided in the bundle. Exposure is most likely in legacy Movable Type environments running SKYARC MTCMS or the named plugins at or below the affected versions. Organizations without these products or plugins are unlikely to be exposed based on the provided sources. Treat as a legacy CMS hygiene issue with moderate urgency if Movable Type remains in use. Prioritize confirming exposure because the affected components are specific and old, but data modification under trusted accounts can still create business risk. Mitigation focus: Upgrade SKYARC MTCMS to 5.252 or later where applicable.; Update or remove the named Movable Type plugins if versions are affected.; Check vendor and JVN guidance for product-specific remediation details..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.