Vendor
Six Apart
42 known vulnerabilities.
Six Apart at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 1 | 0 |
| Oct 2026 | 2 | 1 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 1 | 0 |
| Apr 2026 | 2 | 1 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 4 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 2 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 3 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
Movable Type 27
Movable Type Premium Cloud Edition 11
Movable Type Cloud Edition 10
Movable Type (Software Edition) 8
Movable Type Advanced (Software Edition) 8
Movable Type Premium (Software Edition) 8
Movable Type Premium (Advanced Edition) (Software Edition) 8
Movable Type Premium 7
Movable Type Advanced 4
Movable Type Premium Advanced Edition 4
Movable Type (8.4.x series) 3
Movable Type (8.0.x series) 3
Movable Type Advanced (8.4.x series) 3
Movable Type Advanced (8.0.x series) 3
Movable Type Premium (2.x series) 3
Movable Type Premium (Advanced Edition) (2.x series) 3
Movable Type Cloud Edition (8.x series) 3
Movable Type Premium Cloud Edition (2.x series) 3
Movable Type Premium (MT8-based) 2
Movable Type series 2
Movable Type XMLRPC API 1
Movable Type 7 (Movable Type 7 Series) 1
Movable Type Advanced 7 (Movable Type 7 Series) 1
Movable Type Premium Advanced 1
Movable Type Cloud Edition (Version 7) 1
42 results · Feed
-
Medium 6.9
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality…
-
High 8.6
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated a…
-
Critical 9.4
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacke…
-
Medium 4.3
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator…
-
Critical 9.8
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute …
-
High 7.3
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute …
-
Medium 6.5
If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such …
-
Medium 6.5
A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbit…
-
Medium 5.4
Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an att…
-
Medium 5.4
Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an att…
-
Medium 4.8
Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted i…
-
Medium 4.8
Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored …
-
Medium 4.3
URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, a…
-
Medium 5.3
Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be…
-
Medium 5.4
Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is explo…
-
Medium 6.1
Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Fact…
-
Medium 5.4
Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If …
-
Medium 5.4
Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary…
-
Medium 6.5
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acce…
-
Medium 6.1
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable T…
-
High 7.2
Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenti…
-
Unscored —
Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially craf…
-
Unscored —
Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advan…
-
Unscored —
Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Mova…
-
Unscored —
Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movab…
-
Unscored —
Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable …
-
Unscored —
Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (M…
-
Unscored —
Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and…
-
Unscored —
Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable…
-
Unscored —
Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Mov…
-
Unscored —
Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r…
-
Unscored —
Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 …
-
Unscored —
Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movab…
-
Unscored —
Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Ty…
-
Unscored —
Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Mova…
-
Unscored —
Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1)…
-
Unscored —
HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable…
-
Unscored —
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), …
-
Unscored —
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable …