Advisories · Technology

Six Apart Ltd. Movable Type Premium Cloud Edition.

Every CVE that names Six Apart Ltd. Movable Type Premium Cloud Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103668 CVE record

CVSS 8.8 High

SQL injection in Six Apart Ltd. Movable Type Cloud Edition and others
- Six Apart Ltd. Movable Type Cloud Edition
- Six Apart Ltd. Movable Type
- SQL injection
Not analysed yet 7 Oct 2026
CVE-2026-96408 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Code injection in Six Apart Ltd. Movable Type Cloud Edition and others
- Six Apart Ltd. Movable Type Cloud Edition
- Six Apart Ltd. Movable Type
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-24447 CVE record

CVSS 4.8 Medium

CSV injection in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Other injection
Not analysed yet 4 Feb 2026
CVE-2026-23704 CVE record

CVSS 5.1 Medium

Unrestricted file upload in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Unrestricted file upload
Not analysed yet 4 Feb 2026
CVE-2026-22875 CVE record

CVSS 4.8 Medium

Cross-site scripting in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Cross-site scripting (XSS)
Not analysed yet 4 Feb 2026
CVE-2026-21393 CVE record

CVSS 4.8 Medium

Cross-site scripting in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Cross-site scripting (XSS)
Not analysed yet 4 Feb 2026
CVE-2025-62499 CVE record

CVSS 4.6 Medium

Cross-site scripting in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2025
CVE-2025-54856 CVE record

CVSS 4.6 Medium

Cross-site scripting in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2025
CVE-2025-55706 CVE record

CVSS 5.1 Medium

Open redirect in Six Apart Ltd. Movable Type (Software Edition) and others
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Open redirect
Not analysed yet 20 Aug 2025
CVE-2025-53522 CVE record

CVSS 6.9 Medium

Movable Type contains an issue with use of less trusted source.
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- CWE-348
Not analysed yet 20 Aug 2025
CVE-2023-45746 CVE record

CVSS 5.4 Medium

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script.
- Six Apart Ltd. Movable Type 7 (Movable Type 7 Series)
- Six Apart Ltd. Movable Type Advanced 7 (Movable Type 7 Series)
Not analysed yet 30 Oct 2023