# Six Apart Ltd. Movable Type Premium.

Every CVE that names Six Apart Ltd. Movable Type Premium among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [SQL injection in Six Apart Ltd. Movable Type Cloud Edition and others](https://agentprime.io/advisories/CVE-2026-103668.md)
  `CVE-2026-103668` · CVE record: Six Apart Ltd. Movable Type Cloud Edition and 3 more · CVSS 8.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: SQL injection
- [Code injection in Six Apart Ltd. Movable Type Cloud Edition and others](https://agentprime.io/advisories/CVE-2026-96408.md)
  `CVE-2026-96408` · CVE record: Six Apart Ltd. Movable Type Cloud Edition and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection
- [Missing authorization in Six Apart Ltd. Movable Type and others](https://agentprime.io/advisories/CVE-2026-44392.md)
  `CVE-2026-44392` · CVE record: Six Apart Ltd. Movable Type and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Broken access control
- [Code injection in Six Apart Ltd. Movable Type and others](https://agentprime.io/advisories/CVE-2026-25776.md)
  `CVE-2026-25776` · CVE record: Six Apart Ltd. Movable Type and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2026 · Tags: Code injection
- [SQL injection in Six Apart Ltd. Movable Type and others](https://agentprime.io/advisories/CVE-2026-33088.md)
  `CVE-2026-33088` · CVE record: Six Apart Ltd. Movable Type and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: SQL injection
- [Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script.](https://agentprime.io/advisories/CVE-2023-45746.md)
  `CVE-2023-45746` · CVE record: Six Apart Ltd. Movable Type 7 (Movable Type 7 Series) and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2023

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=six-apart-ltd-movable-type-premium>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/six-apart-ltd-movable-type-premium/>. Everything for agents: <https://agentprime.io/llms.txt>.