BlogsWeek.com

Movable Type 3.35 has been released, mainly because of “a XSS vulnerability that was found in our comment preview code. The vulnerability affects only a small number of people, but we felt it important to address the issue as soon as we could. And since we were turning on the release machines we went ahead and tackled a couple of other bug fixes and introduced a new feature as well.”

The new feature is a greatly improved installation process. Now a Setup Wizard helps users configure the platform on their web server, asking a few questions and then taking care of the rest.

Another important change is on how you download Movable Type. Now users seeking the personal and free edition no longer have to create a TypeKey account to download the software, they just click the link that says “Download Movable Type”.

For additional information and instructions to fix the security vulnerability, please refer to the release announcement.