Browse CVEs

CRITICAL 9.8 CVE-2026-33088 Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement. Movable Type 8.0.10 / 8.8.3+ Fix from $2,3002026-04-08 CRITICAL 9.8 CVE-2026-25776 Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script. Movable Type 8.0.10 / 8.8.3+ Fix from $2,3002026-04-08 MEDIUM 5.4 CVE-2023-45746 Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/ver… Movable Type 1.59 / 7.902.0+ Fix from $1,6002023-10-30 MEDIUM 6.5 CVE-2022-45113 Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may… Movable Type 6.8.7 / 7.9.6+ Fix from $1,6002022-12-07 MEDIUM 6.1 CVE-2022-45122 Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earl… Movable Type 6.8.7 / 7.9.6+ Fix from $1,6002022-12-07 HIGH 7.2 CVE-2022-43660 Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege … Movable Type 7.9.6+ Fix from $1,9502022-12-07 CRITICAL 9.8 CVE-2022-38078 Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to … Movable Type 1.53 / 6.8.7+ Fix from $2,3002022-08-24 MEDIUM 5.4 CVE-2020-5669 Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier allows a … Movable Type after 1.37 Fix from $1,6002021-10-26 CRITICAL 9.8 CVE-2021-20837EPSS 88% Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and… Movable Type after 7.8.1 Fix from $2,3002021-10-26 MEDIUM 6.1 CVE-2021-20808 Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 an… Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20809 Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r.4903 and earlier (Movable Typ… Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20810 Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable T… Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20811 Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type … Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20812 Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Type Advance… Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20813 Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series) and Mova… Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20814 Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable Type 7 r.4903 and earlier (Mov… Movable Type 7.8.0+ Fix from $1,6002021-08-26 MEDIUM 6.1 CVE-2021-20815 Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Typ… Movable Type 7.8.0+ Fix from $1,6002021-08-26 HIGH 8.8 CVE-2020-5576 Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Adva… Movable Type after 7.2.1 Fix from $1,9502020-05-14 HIGH 8.8 CVE-2020-5577 Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Adv… Movable Type after 7.2.1 Fix from $1,9502020-05-14 MEDIUM 6.1 CVE-2020-5575 Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606… Movable Type after 7.2.1 Fix from $1,6002020-05-14 MEDIUM 5.3 CVE-2020-5574 HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advance… Movable Type after 7.2.1 Fix from $1,6002020-05-14 MEDIUM 6.1 CVE-2020-5528 Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable Type 6.5.2 and earlier (Movabl… Movable Type after 7.1.4 Fix from $1,6002020-02-06 MEDIUM 6.1 CVE-2019-6025 Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable … Movable Type after 7.1.3 Fix from $1,6002019-12-26 MEDIUM 6.1 CVE-2018-0672 Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbitrary web script or HTML via un… Movable Type 6.3.1+ Fix from $1,6002018-09-04 CRITICAL 9.8 CVE-2016-5742 SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Type Open S… Movable Type after 5.2.13 Fix from $2,3002017-01-23 HIGH 7.5 CVE-2015-0845 Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attack… Movabletype after 5.2.11 Fix from $1,9502015-04-17 HIGH 7.5 CVE-2013-2184 Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_… Movable Type after 5.2.5 Fix from $1,9502015-03-27 HIGH 7.5 CVE-2013-0209EPSS 45% lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration fun… Movable Type Patch available Fix from $1,9502013-01-23 HIGH 7.5 CVE-2011-5085 Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify data via unknown vectors. Movable Type Patch available Fix from $1,9502012-04-02 HIGH 7.5 CVE-2012-0320 Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related … Movable Type after 4.37 Fix from $1,9502012-03-03