Vendor

Six Apart

42 known vulnerabilities.

Products

Movable Type 27 Movable Type Premium Cloud Edition 11 Movable Type Cloud Edition 10 Movable Type (Software Edition) 8 Movable Type Advanced (Software Edition) 8 Movable Type Premium (Software Edition) 8 Movable Type Premium (Advanced Edition) (Software Edition) 8 Movable Type Premium 7 Movable Type Advanced 4 Movable Type Premium Advanced Edition 4 Movable Type (8.4.x series) 3 Movable Type (8.0.x series) 3 Movable Type Advanced (8.4.x series) 3 Movable Type Advanced (8.0.x series) 3 Movable Type Premium (2.x series) 3 Movable Type Premium (Advanced Edition) (2.x series) 3 Movable Type Cloud Edition (8.x series) 3 Movable Type Premium Cloud Edition (2.x series) 3 Movable Type Premium (MT8-based) 2 Movable Type series 2 Movable Type XMLRPC API 1 Movable Type 7 (Movable Type 7 Series) 1 Movable Type Advanced 7 (Movable Type 7 Series) 1 Movable Type Premium Advanced 1 Movable Type Cloud Edition (Version 7) 1

All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

Medium 6.9

CVE-2026-117687

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality…

Six Apart Movable Type Movable Type Premium Movable Type Premium Advanced Edition

Nov 12, 2026
Medium 4.3

CVE-2026-44392

Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator…

Six Apart Movable Type Movable Type Premium Movable Type Premium Advanced Edition

May 20, 2026
Medium 6.5

CVE-2026-24447

If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such …

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)

Feb 4, 2026
Medium 6.5

CVE-2026-23704

A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbit…

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)

Feb 4, 2026
Medium 5.4

CVE-2026-22875

Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an att…

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)

Feb 4, 2026
Medium 5.4

CVE-2026-21393

Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an att…

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)

Feb 4, 2026
Medium 4.8

CVE-2025-62499

Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted i…

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Premium (Advanced Edition) (Software Edition)

Oct 23, 2025
Medium 4.8

CVE-2025-54856

Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored …

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Premium (Advanced Edition) (Software Edition)

Oct 23, 2025
Medium 4.3

CVE-2025-55706

URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, a…

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)

Aug 20, 2025
Medium 5.3

CVE-2025-53522

Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be…

Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)

Aug 20, 2025
Medium 5.4

CVE-2025-24841

Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is explo…

Six Apart Movable Type Advanced (8.0.x series) Movable Type Premium (Advanced Edition) (2.x series) Movable Type Premium Cloud Edition (2.x series)

Feb 19, 2025
Medium 6.1

CVE-2025-25054

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Fact…

Six Apart Movable Type Premium (Advanced Edition) (2.x series) Movable Type Premium Cloud Edition (2.x series) Movable Type (8.4.x series)

Feb 19, 2025
Medium 5.4

CVE-2025-22888

Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If …

Six Apart Movable Type Premium (Advanced Edition) (2.x series) Movable Type Premium Cloud Edition (2.x series) Movable Type (8.4.x series)

Feb 19, 2025
Medium 5.4

CVE-2023-45746

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary…

Six Apart Movable Type Premium Cloud Edition Movable Type Premium Movable Type Advanced 7 (Movable Type 7 Series)

Oct 30, 2023
Medium 6.5

CVE-2022-45113

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acce…

Six Apart Movable Type

Dec 7, 2022
Medium 6.1

CVE-2022-45122

Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable T…

Six Apart Movable Type

Dec 7, 2022