SIX Apart Ltd. vulnerabilities
41 CVEs and advisories name SIX Apart Ltd. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-103668An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an
- CVE-2026-96408A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbit
- CVE-2026-44392Missing authorization vulnerability exists in Movable Type.
- CVE-2026-25776Movable Type provided by Six Apart Ltd.
- CVE-2026-33088Movable Type provided by Six Apart Ltd.
- CVE-2026-24447If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data.
- CVE-2026-23704A non-administrative user can upload malicious files.
- CVE-2026-22875Movable Type contains a stored cross-site scripting vulnerability in Export Sites.
- CVE-2026-21393Movable Type contains a stored cross-site scripting vulnerability in Edit Comment.
- CVE-2025-62499Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page.
- CVE-2025-54856Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page.
- CVE-2025-55706URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type.
- CVE-2025-53522Movable Type contains an issue with use of less trusted source.
- CVE-2025-24841Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor.
- CVE-2025-25054Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page.
- CVE-2025-22888Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor.
- CVE-2023-45746Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script.
- CVE-2022-45122Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301
- CVE-2022-45113Improper validation of syntactic correctness of input vulnerability exist in Movable Type series.
- CVE-2022-43660Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with P
- CVE-2022-38078Movable Type XMLRPC API provided by Six Apart Ltd.
- CVE-2020-5669Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier
- CVE-2021-20837Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r
- CVE-2021-20815Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Mo
- CVE-2021-20814Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable Type 7 r.4903 and ear
- CVE-2021-20813Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series)
- CVE-2021-20812Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Typ
- CVE-2021-20811Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Mova
- CVE-2021-20810Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series),
- CVE-2021-20809Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r.4903 and earlier (Mo