Skip to contentSix Apart Ltd. Movable Type vulnerabilities
- six apart ltd. movable type, movable type advanced, movable type premium +1 more +3 moreMovable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic...CVE-2026-1176876.9 Medium
- six apart ltd. movable type, movable type cloud edition, movable type premium +1 more +3 moreAn SQL Injection vulnerability exists in the Site Search function of Movable Type, which may...CVE-2026-1036688.8 High
- six apart ltd. movable type, movable type cloud edition, movable type premium +1 more +3 moreA code injection vulnerability exists in the upgrade script of Movable Type, which may allow an...CVE-2026-964089.3 Critical
- six apart ltd. movable type, movable type advanced, movable type premium +1 more +3 moreMissing authorization vulnerability exists in Movable Type. Under certain conditions, when a user...CVE-2026-443925.3 Medium
- six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 moreMovable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow...CVE-2026-257769.3 Critical
- six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 moreMovable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow...CVE-2026-330886.9 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreIf a malformed data is input to the affected product, a CSV file downloaded from the affected...CVE-2026-244474.8 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreA non-administrative user can upload malicious files. When an administrator or the product...CVE-2026-237045.1 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted...CVE-2026-228754.8 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted...CVE-2026-213934.8 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of...CVE-2025-624994.6 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If...CVE-2025-548564.6 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreURL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this...CVE-2025-557065.1 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains an issue with use of less trusted source. If exploited, tampered email to...CVE-2025-535226.9 Medium
- six apart ltd. movable type (8.0.x series), movable type (8.4.x series), movable type advanced (8.0.x series) +5 more +7 moreMovable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT...CVE-2025-248415.4 Medium
- six apart ltd. movable type (8.0.x series), movable type (8.4.x series), movable type advanced (8.0.x series) +5 more +7 moreMovable Type contains a reflected cross-site scripting vulnerability in the user information edit...CVE-2025-250546.1 Medium
- six apart ltd. movable type (8.0.x series), movable type (8.4.x series), movable type advanced (8.0.x series) +5 more +7 moreMovable Type contains a stored cross-site scripting vulnerability in the custom block edit page...CVE-2025-228885.4 Medium
- six apart ltd. movable type cloud edition (version 7), movable type premium, movable type premium advanced +4 more +6 moreCross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker...CVE-2023-457465.4 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable...CVE-2022-451226.1 Medium
- six apart ltd. movable typeImproper validation of syntactic correctness of input vulnerability exist in Movable Type series....CVE-2022-451136.5 Medium
- six apart ltd. movable typeImproper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series...CVE-2022-436607.2 High
- six apart ltd. movable type xmlrpc api, sixapart movable type +1 moreMovable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability....CVE-2022-380789.8 Critical
- six apart ltd. movable typeCross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and...CVE-2020-56695.4 Medium
- six apart ltd. movable typeMovable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier ...CVE-2021-20837Public exploitEPSS 88.1%9.8 Critical
- six apart ltd. movable typeCross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r...CVE-2021-208156.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of...CVE-2021-208146.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7...CVE-2021-208136.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type...CVE-2021-208126.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r...CVE-2021-208116.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r...CVE-2021-208106.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable...CVE-2021-208096.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and...CVE-2021-208086.1 Medium
- movabletype movable type, movable type advanced, movable type premium +1 more +3 moreCross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r...CVE-2021-206656.1 Medium
- movabletype movable type, movable type advanced, movable type premium +1 more +3 moreCross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and...CVE-2021-206646.1 Medium
- movabletype movable type, movable type advanced, movable type premium +1 more +3 moreCross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705...CVE-2021-206636.1 Medium
- six apart ltd. movable typeMovable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type...CVE-2020-55778.8 High
- six apart ltd. movable typeCross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7...CVE-2020-55768.8 High
- six apart ltd. movable typeCross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and...CVE-2020-55756.1 Medium
- six apart ltd. movable typeHTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1...CVE-2020-55745.3 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote...CVE-2018-06726.1 Medium