Approved changes feed: RSS · Atom

cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*

part: a version: * update: *

VendorSixapart (543b49bd-f8e0-5cde-b451-64c37d476b91)
ProductMovable Type (0b1b8903-7eaa-5490-a1bc-f063c17195fc)
Edition*
Language*
Software editionadvanced
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-33088 vulnerable 2026-06-08 07:57:18.566517 Details available
HIGH (7.3)
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.
Published: 2026-04-08T08:51:45.916Z
Updated: 2026-04-08T13:31:08.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25776 vulnerable 2026-06-08 07:53:20.341150 Details available
CRITICAL (9.8)
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.
Published: 2026-04-08T08:52:15.469Z
Updated: 2026-04-08T13:22:04.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45746 vulnerable 2026-06-08 06:12:43.216284 Details available
Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier.
Published: 2023-10-30T04:57:43.561Z
Updated: 2024-10-29T18:23:10.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45122 vulnerable 2026-06-08 05:50:35.669080 Details available
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T19:03:12.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45113 vulnerable 2026-06-08 05:50:35.661079 Details available
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T15:50:21.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43660 vulnerable 2026-06-08 05:49:33.691234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20837 vulnerable 2026-06-08 05:29:10.616683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20815 vulnerable 2026-06-08 05:29:10.586736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20814 vulnerable 2026-06-08 05:29:10.586391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20813 vulnerable 2026-06-08 05:29:10.586066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20812 vulnerable 2026-06-08 05:29:10.585767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20811 vulnerable 2026-06-08 05:29:10.585469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20810 vulnerable 2026-06-08 05:29:10.585092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20809 vulnerable 2026-06-08 05:29:10.584670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20808 vulnerable 2026-06-08 05:29:10.584176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5577 vulnerable 2026-06-08 05:26:43.149580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5576 vulnerable 2026-06-08 05:26:43.149063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5575 vulnerable 2026-06-08 05:26:43.148324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5574 vulnerable 2026-06-08 05:26:43.145600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5528 vulnerable 2026-06-08 05:26:43.010664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6025 vulnerable 2026-06-08 05:14:08.709522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1592 vulnerable 2026-06-08 05:06:25.896863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.