Movable Type
Approved changes feed: RSS · Atom
cpe:2.3:a:six_apart_ltd.:movable_type:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Six Apart Ltd. (ecf3900e-a4ac-502e-b3ed-8ebfefccbb1e) |
|---|---|
| Product | Movable Type (190711b6-1725-5868-b6ff-d547ef0c3e39) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44392 |
vulnerable | 2026-06-08 08:05:11.023280 |
Details available
MEDIUM (4.3)
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
Published: 2026-05-20T05:28:14.892Z
Updated: 2026-05-20T13:04:04.783Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33088 |
vulnerable | 2026-06-08 07:57:18.562619 |
Details available
HIGH (7.3)
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.
Published: 2026-04-08T08:51:45.916Z
Updated: 2026-04-08T13:31:08.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25776 |
vulnerable | 2026-06-08 07:53:20.334298 |
Details available
CRITICAL (9.8)
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.
Published: 2026-04-08T08:52:15.469Z
Updated: 2026-04-08T13:22:04.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45122 |
vulnerable | 2026-06-08 05:50:35.668678 |
Details available
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T19:03:12.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45113 |
vulnerable | 2026-06-08 05:50:35.657211 |
Details available
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T15:50:21.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43660 |
vulnerable | 2026-06-08 05:49:33.687849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20837 |
vulnerable | 2026-06-08 05:29:10.614751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20815 |
vulnerable | 2026-06-08 05:29:10.586654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20814 |
vulnerable | 2026-06-08 05:29:10.586326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20813 |
vulnerable | 2026-06-08 05:29:10.586016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20812 |
vulnerable | 2026-06-08 05:29:10.585720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20811 |
vulnerable | 2026-06-08 05:29:10.585380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20810 |
vulnerable | 2026-06-08 05:29:10.584996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20809 |
vulnerable | 2026-06-08 05:29:10.584566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20808 |
vulnerable | 2026-06-08 05:29:10.579946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20665 |
vulnerable | 2026-06-08 05:29:10.073769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20664 |
vulnerable | 2026-06-08 05:29:10.073387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20663 |
vulnerable | 2026-06-08 05:29:10.069421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5669 |
vulnerable | 2026-06-08 05:26:43.502328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5577 |
vulnerable | 2026-06-08 05:26:43.149552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5576 |
vulnerable | 2026-06-08 05:26:43.148952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5575 |
vulnerable | 2026-06-08 05:26:43.148277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5574 |
vulnerable | 2026-06-08 05:26:43.145540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.