Information from Six Apart KK

Vulnerability ID:JVN#30385652
Title:Movable Type vulnerable to cross-site scripting
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.