MT
Product
Movable Type Premium (Advanced Edition) (Software Edition)
8
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 8Low 0
Watch
Add Movable Type Premium (Advanced Edition) (Software Edition) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24447 | 6.5 | Feb 4 | If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data Affected: 9.0.4 (MTP 9.0 series); 2.13 and earlier (MTP 2 series) |
| CVE-2026-23704 | 6.5 | Feb 4 | A non-administrative user can upload malicious files Affected: 9.0.4 (MTP 9.0 series); 2.13 and earlier (MTP 2 series) |
| CVE-2026-22875 | 5.4 | Feb 4 | Movable Type contains a stored cross-site scripting vulnerability in Export Sites Affected: 9.0.4 (MTP 9.0 series); 2.13 and earlier (MTP 2 series) |
| CVE-2026-21393 | 5.4 | Feb 4 | Movable Type contains a stored cross-site scripting vulnerability in Edit Comment Affected: 9.0.4 (MTP 9.0 series); 2.13 and earlier (MTP 2 series) |
| CVE-2025-53522 | 5.3 | Aug 20 | Movable Type contains an issue with use of less trusted source Affected: 2.09 and earlier (2 series); 1.66 and earlier (1 series) |
| CVE-2025-62499 | 4.8 | Oct 23 | Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page Affected: 2.10 and earlier (2 series); 1.67 and earlier (1 series) |
| CVE-2025-54856 | 4.8 | Oct 23 | Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page Affected: 2.10 and earlier (2 series); 1.67 and earlier (1 series) |
| CVE-2025-55706 | 4.3 | Aug 20 | URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type Affected: 2.09 and earlier (2 series); 1.66 and earlier (1 series) |
Showing 8