Movable Type
Approved changes feed: RSS · Atom
cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*
part: a version: * update: *
| Vendor | Sixapart (543b49bd-f8e0-5cde-b451-64c37d476b91) |
|---|---|
| Product | Movable Type (0b1b8903-7eaa-5490-a1bc-f063c17195fc) |
| Edition | * |
| Language | * |
| Software edition | premium_advanced |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33088 |
vulnerable | 2026-06-08 07:57:18.568326 |
Details available
HIGH (7.3)
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.
Published: 2026-04-08T08:51:45.916Z
Updated: 2026-04-08T13:31:08.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25776 |
vulnerable | 2026-06-08 07:53:20.337762 |
Details available
CRITICAL (9.8)
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.
Published: 2026-04-08T08:52:15.469Z
Updated: 2026-04-08T13:22:04.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45746 |
vulnerable | 2026-06-08 06:12:43.218639 |
Details available
Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier.
Published: 2023-10-30T04:57:43.561Z
Updated: 2024-10-29T18:23:10.383Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45122 |
vulnerable | 2026-06-08 05:50:35.668941 |
Details available
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T19:03:12.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45113 |
vulnerable | 2026-06-08 05:50:35.659157 |
Details available
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T15:50:21.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43660 |
vulnerable | 2026-06-08 05:49:33.689521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38078 |
vulnerable | 2026-06-08 05:47:14.560168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20837 |
vulnerable | 2026-06-08 05:29:10.614818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20815 |
vulnerable | 2026-06-08 05:29:10.586700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20812 |
vulnerable | 2026-06-08 05:29:10.585746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20811 |
vulnerable | 2026-06-08 05:29:10.585431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20810 |
vulnerable | 2026-06-08 05:29:10.585055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20809 |
vulnerable | 2026-06-08 05:29:10.584631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20808 |
vulnerable | 2026-06-08 05:29:10.582426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5669 |
vulnerable | 2026-06-08 05:26:43.503291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.