Sixapart Movable Type vulnerabilities

• six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 more Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow... CVE-2026-25776 9.3 CriticalApril 8, 2026
• six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 more Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow... CVE-2026-33088 6.9 MediumApril 8, 2026
• six apart ltd. movable type cloud edition (version 7), movable type premium, movable type premium advanced +4 more +6 more Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker... CVE-2023-45746 5.4 MediumOctober 30, 2023
• six apart ltd. movable type Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable... CVE-2022-45122 6.1 MediumDecember 7, 2022
• six apart ltd. movable type Improper validation of syntactic correctness of input vulnerability exist in Movable Type series.... CVE-2022-45113 6.5 MediumDecember 7, 2022
• six apart ltd. movable type Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series... CVE-2022-43660 7.2 HighDecember 7, 2022
• six apart ltd. movable type xmlrpc api, sixapart movable type +1 more Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability.... CVE-2022-38078 9.8 CriticalAugust 24, 2022
• six apart ltd. movable type Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and... CVE-2020-5669 5.4 MediumOctober 26, 2021
• six apart ltd. movable type Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier ... CVE-2021-20837 Public exploit EPSS 88.1% 9.8 CriticalOctober 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r... CVE-2021-20815 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of... CVE-2021-20814 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7... CVE-2021-20813 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type... CVE-2021-20812 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r... CVE-2021-20811 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r... CVE-2021-20810 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable... CVE-2021-20809 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and... CVE-2021-20808 6.1 MediumAugust 26, 2021
• six apart ltd. movable type Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type... CVE-2020-5577 8.8 HighMay 14, 2020
• six apart ltd. movable type Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7... CVE-2020-5576 8.8 HighMay 14, 2020
• six apart ltd. movable type Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and... CVE-2020-5575 6.1 MediumMay 14, 2020
• six apart ltd. movable type HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1... CVE-2020-5574 5.3 MediumMay 14, 2020
• six apart ltd movable type series, sixapart movable type +1 more Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier ... CVE-2020-5528 6.1 MediumFebruary 6, 2020
• six apart ltd movable type series, sixapart movable type +1 more Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier ... CVE-2019-6025 6.1 MediumDecember 26, 2019
• six apart ltd. movable type Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote... CVE-2018-0672 6.1 MediumSeptember 4, 2018
• sixapart movable type, movable type open source +1 more SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before... CVE-2016-5742 Fix available 9.8 CriticalJune 27, 2016
• sixapart movable type Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote... CVE-2013-2184 7.5 HighMarch 12, 2015
• sixapart movable type, debian linux +1 more Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7... CVE-2015-1592 Public exploit EPSS 74.8% 7.5 HighFebruary 19, 2015
• sixapart movable type, debian linux +1 more SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5... CVE-2014-9057 7.5 HighDecember 16, 2014
• sixapart movable type Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT)... CVE-2012-1503 Public exploit 4.3 MediumAugust 29, 2014
• sixapart movable type lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require... CVE-2013-0209 Public exploitFix available EPSS 45.2% 7.5 HighJanuary 22, 2013
• sixapart movable type Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take... CVE-2012-0320 7.5 HighMarch 2, 2012
• sixapart movable type Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x... CVE-2012-0317 6.8 MediumMarch 2, 2012
• sixapart movable type Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote... CVE-2011-5085 7.5 HighMarch 2, 2012
• sixapart movable type Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05... CVE-2011-5084 4.3 MediumMarch 2, 2012
• sixapart movable type Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six... CVE-2010-1985 4.3 MediumMay 19, 2010
• six apart movable type Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261... CVE-2009-2492 2.6 LowJuly 17, 2009
• six apart movable type mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized,... CVE-2009-2481 5.8 MediumJuly 16, 2009
• sixapart movable type Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown... CVE-2009-0752 10.0 HighMarch 3, 2009
• sixapart movable type Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission... CVE-2008-5846 4.0 MediumJanuary 5, 2009
• sixapart movable type Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23... CVE-2008-5845 4.3 MediumJanuary 5, 2009
• six apart movable type Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1... CVE-2008-5808 4.3 MediumJanuary 2, 2009