CVE:CVE-2009-2480
CNNVD:CNNVD-200907-266
Six Apart Movable Type 4.24和4.25的mt-wizard.cgi存在跨站脚本攻击漏洞在模板尚未初始化情况下，会允许远程攻击者通过未知向量注入任意web脚本或HTML。
solution:Upgrade movabletype six_apart_movable_type to a higher version than 4.24,4.25,and avoid the version 4.24,4.25