Movable Type at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 1 | 0 |
| Oct 2026 | 2 | 1 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 1 | 0 |
| Apr 2026 | 2 | 1 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
27 results · Feed
-
Medium 6.9
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality…
-
High 8.6
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated a…
-
Critical 9.4
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacke…
-
Medium 4.3
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator…
-
Critical 9.8
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute …
-
High 7.3
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute …
-
Medium 6.5
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acce…
-
Medium 6.1
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable T…
-
High 7.2
Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenti…
-
Unscored —
Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advan…
-
Unscored —
Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Mova…
-
Unscored —
Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movab…
-
Unscored —
Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable …
-
Unscored —
Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (M…
-
Unscored —
Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and…
-
Unscored —
Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable…
-
Unscored —
Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Mov…
-
Unscored —
Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r…
-
Unscored —
Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 …
-
Unscored —
Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movab…
-
Unscored —
Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Ty…
-
Unscored —
Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Mova…
-
Unscored —
Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1)…
-
Unscored —
HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable…
-
Unscored —
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), …
-
Unscored —
Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbit…