Movable Type Premium Cloud Edition

9 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-24447

  If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such …

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Feb 4, 2026
• Medium 6.5
  CVE-2026-23704

  A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbit…

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Feb 4, 2026
• Medium 5.4
  CVE-2026-22875

  Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an att…

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Feb 4, 2026
• Medium 5.4
  CVE-2026-21393

  Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an att…

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Feb 4, 2026
• Medium 4.8
  CVE-2025-62499

  Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted i…

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Premium (Advanced Edition) (Software Edition)
  Oct 23, 2025
• Medium 4.8
  CVE-2025-54856

  Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored …

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Oct 23, 2025
• Medium 4.3
  CVE-2025-55706

  URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, a…

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Aug 20, 2025
• Medium 5.3
  CVE-2025-53522

  Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be…

  Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Advanced (Software Edition)
  Aug 20, 2025
• Medium 5.4
  CVE-2023-45746

  Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary…

  Six Apart Movable Type Premium Cloud Edition Movable Type Premium Movable Type Cloud Edition (Version 7)
  Oct 30, 2023