Skip to contentSix Apart Ltd. Movable Type Premium vulnerabilities
- six apart ltd. movable type, movable type advanced, movable type premium +1 more +3 moreMovable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic...CVE-2026-1176876.9 Medium
- six apart ltd. movable type, movable type cloud edition, movable type premium +1 more +3 moreAn SQL Injection vulnerability exists in the Site Search function of Movable Type, which may...CVE-2026-1036688.8 High
- six apart ltd. movable type, movable type cloud edition, movable type premium +1 more +3 moreA code injection vulnerability exists in the upgrade script of Movable Type, which may allow an...CVE-2026-964089.3 Critical
- six apart ltd. movable type, movable type advanced, movable type premium +1 more +3 moreMissing authorization vulnerability exists in Movable Type. Under certain conditions, when a user...CVE-2026-443925.3 Medium
- six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 moreMovable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow...CVE-2026-257769.3 Critical
- six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 moreMovable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow...CVE-2026-330886.9 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreIf a malformed data is input to the affected product, a CSV file downloaded from the affected...CVE-2026-244474.8 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreA non-administrative user can upload malicious files. When an administrator or the product...CVE-2026-237045.1 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted...CVE-2026-228754.8 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted...CVE-2026-213934.8 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of...CVE-2025-624994.6 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If...CVE-2025-548564.6 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreURL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this...CVE-2025-557065.1 Medium
- six apart ltd. movable type (cloud edition), movable type (software edition), movable type advanced (software edition) +3 more +5 moreMovable Type contains an issue with use of less trusted source. If exploited, tampered email to...CVE-2025-535226.9 Medium
- six apart ltd. movable type (8.0.x series), movable type (8.4.x series), movable type advanced (8.0.x series) +5 more +7 moreMovable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT...CVE-2025-248415.4 Medium
- six apart ltd. movable type (8.0.x series), movable type (8.4.x series), movable type advanced (8.0.x series) +5 more +7 moreMovable Type contains a reflected cross-site scripting vulnerability in the user information edit...CVE-2025-250546.1 Medium
- six apart ltd. movable type (8.0.x series), movable type (8.4.x series), movable type advanced (8.0.x series) +5 more +7 moreMovable Type contains a stored cross-site scripting vulnerability in the custom block edit page...CVE-2025-228885.4 Medium
- six apart ltd. movable type cloud edition (version 7), movable type premium, movable type premium advanced +4 more +6 moreCross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker...CVE-2023-457465.4 Medium