Movable Type

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:*:*:*

part: a version: * update: *

VendorSixapart (543b49bd-f8e0-5cde-b451-64c37d476b91)
ProductMovable Type (0b1b8903-7eaa-5490-a1bc-f063c17195fc)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45122 vulnerable 2026-06-08 05:50:35.669059 Details available
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T19:03:12.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45113 vulnerable 2026-06-08 05:50:35.660162 Details available
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T15:50:21.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43660 vulnerable 2026-06-08 05:49:33.690308 Details available
Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T14:10:58.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20837 vulnerable 2026-06-08 05:29:10.616657 Details available
Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.
Published: 2021-10-26T05:15:12.000Z
Updated: 2024-08-03T17:53:22.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20815 vulnerable 2026-06-08 05:29:10.586720 Details available
Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.44 and earlier, and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Published: 2021-08-26T01:20:46.000Z
Updated: 2024-08-03T17:53:22.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20814 vulnerable 2026-06-08 05:29:10.586373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20813 vulnerable 2026-06-08 05:29:10.586045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20811 vulnerable 2026-06-08 05:29:10.585451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20810 vulnerable 2026-06-08 05:29:10.585075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20809 vulnerable 2026-06-08 05:29:10.584650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20808 vulnerable 2026-06-08 05:29:10.583241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5577 vulnerable 2026-06-08 05:26:43.149778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5576 vulnerable 2026-06-08 05:26:43.149185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5575 vulnerable 2026-06-08 05:26:43.148459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5574 vulnerable 2026-06-08 05:26:43.147006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.