Six Apart Ltd. Movable Type Advanced (Software Edition)
8 CVEs affecting Six Apart Ltd. Movable Type Advanced (Software Edition). Latest disclosed: 2026-02-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24447 | Medium | 6.5 | 2026-02-04 | If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data. When a victim user downl… |
CVE-2026-23704 | Medium | 6.5 | 2026-02-04 | A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbitrary script may be executed on the admin… |
CVE-2026-22875 | Medium | 5.4 | 2026-02-04 | Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an attacker, arbitrary script may be executed… |
CVE-2026-21393 | Medium | 5.4 | 2026-02-04 | Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an attacker, arbitrary script may be executed… |
CVE-2025-53522 | Medium | 5.3 | 2025-08-20 | Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be sent by a remote unauthenticated attack… |
CVE-2025-62499 | Medium | 4.8 | 2025-10-23 | Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "Cont… |
CVE-2025-54856 | Medium | 4.8 | 2025-10-23 | Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Managem… |
CVE-2025-55706 | Medium | 4.3 | 2025-08-20 | URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted int… |