SA
Vendor
Six Apart Ltd.
72
CVEs
0
On KEV
8
New 30D
Products
MT9.4
Movable Type Cloud Edition
Six Apart Ltd.
10 CVEs0 on KEV2 new
MT9.4
Movable Type Premium Cloud Edition
Six Apart Ltd.
10 CVEs0 on KEV2 new
MT9.8
Movable Type
Six Apart Ltd.
7 CVEs0 on KEV2 new
MT9.8
Movable Type Premium
Six Apart Ltd.
5 CVEs0 on KEV2 new
MT6.5
Movable Type Advanced (Software Edition)
Six Apart Ltd.
8 CVEs0 on KEV0 new
MT6.5
Movable Type Premium (Advanced Edition) (Software Edition)
Six Apart Ltd.
8 CVEs0 on KEV0 new
MT6.5
Movable Type Premium (Software Edition)
Six Apart Ltd.
8 CVEs0 on KEV0 new
MT6.5
Movable Type (Software Edition)
Six Apart Ltd.
8 CVEs0 on KEV0 new
MT9.8
Movable Type Advanced
Six Apart Ltd.
3 CVEs0 on KEV0 new
MT9.8
Movable Type Premium Advanced Edition
Six Apart Ltd.
3 CVEs0 on KEV0 new
MT9.8
Movable Type Premium (MT8-based)
Six Apart Ltd.
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103668 | MT Movable Type Cloud Edition Six Apart Ltd. | 8.6 | Oct 7 | An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected… |
| CVE-2026-96408 | MT Movable Type Cloud Edition Six Apart Ltd. | 9.4 | Oct 7 | A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the… |
| CVE-2026-44392 | MT Movable Type Six Apart Ltd. | 4.3 | May 20 | Missing authorization vulnerability exists in Movable Type |
| CVE-2026-25776 | MT Movable Type Premium Six Apart Ltd. | 9.8 | Apr 8 | Movable Type provided by Six Apart Ltd |
| CVE-2026-33088 | MT Movable Type Six Apart Ltd. | 9.8 | Apr 8 | Movable Type provided by Six Apart Ltd |
| CVE-2026-24447 | MT Movable Type Premium (Advanced Edition) (Software Edition) Six Apart Ltd. | 6.5 | Feb 4 | If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data |
| CVE-2026-23704 | MT Movable Type (Cloud Edition) Six Apart Ltd. | 6.5 | Feb 4 | A non-administrative user can upload malicious files |
| CVE-2026-22875 | MT Movable Type Premium (Cloud Edition) Six Apart Ltd. | 5.4 | Feb 4 | Movable Type contains a stored cross-site scripting vulnerability in Export Sites |
| CVE-2026-21393 | MT Movable Type Premium (Advanced Edition) (Software Edition) Six Apart Ltd. | 5.4 | Feb 4 | Movable Type contains a stored cross-site scripting vulnerability in Edit Comment |
| CVE-2025-62499 | MT Movable Type Premium (Advanced Edition) (Software Edition) Six Apart Ltd. | 4.8 | Oct 23 | Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page |
| CVE-2025-54856 | MT Movable Type (Cloud Edition) Six Apart Ltd. | 4.8 | Oct 23 | Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page |
| CVE-2025-55706 | MT Movable Type Premium (Cloud Edition) Six Apart Ltd. | 4.3 | Aug 20 | URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type |
| CVE-2025-53522 | MT Movable Type Advanced (Software Edition) Six Apart Ltd. | 5.3 | Aug 20 | Movable Type contains an issue with use of less trusted source |
| CVE-2009-2492 | MT Movable Type Six Apart Ltd | – | Jul 17 | Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified… |
| CVE-2007-0604 | MT Movable Type Six Apart Ltd | – | Jan 30 | Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the… |