Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

48 records

Vendor: Sixapart Clear all filters
TI-2023-24520 CVE-2023-45746 · GHSA-wpjj-rrr4-p36v

Cross-site scripting in Six Apart Ltd. Movable Type 7

Priority LOW 25

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00441 Published 2023-10-30 No fix listed CWE-79
TI-2022-22200 CVE-2022-45122 · GHSA-42qq-mf68-hprg

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 28

Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (M…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00541 Published 2022-12-07 No fix listed CWE-79
TI-2022-21425 CVE-2022-43660 · GHSA-j8hc-rq6g-3f96

Code injection in Six Apart Ltd. Movable Type

Priority LOW 36

Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/o…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01045 Published 2022-12-07 No fix listed CWE-94
TI-2020-04634 CVE-2020-5669 · GHSA-3x6m-pmx9-j7f5

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 25

Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanced 1.37 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspeci…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2021-10-26 No fix listed CWE-79
TI-2021-04052 CVE-2021-20837 · GHSA-fq4q-8q83-6gj7

OS command injection in Six Apart Ltd. Movable Type

Priority HIGH 84

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88144 Published 2021-10-26 No fix listed CWE-78
TI-2021-04040 CVE-2021-20815 · GHSA-44gc-6277-jwf7

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.009 Published 2021-08-26 No fix listed CWE-79
TI-2021-04039 CVE-2021-20814 · GHSA-qjjc-j7xm-pf48

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4903 and earlier (Movabl…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00904 Published 2021-08-26 No fix listed CWE-79
TI-2021-04038 CVE-2021-20813 · GHSA-8p38-cjxc-8fxx

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series) and Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series)…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.009 Published 2021-08-26 No fix listed CWE-79
TI-2021-04037 CVE-2021-20812 · GHSA-2554-pph3-4jmx

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series) and Movable Type Premium Advanced 1.44 and earlier) allows…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.009 Published 2021-08-26 No fix listed CWE-79
TI-2021-04036 CVE-2021-20811 · GHSA-9xx6-3c29-j6cq

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.49…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.009 Published 2021-08-26 No fix listed CWE-79
TI-2021-04035 CVE-2021-20810 · GHSA-j9hg-mq8j-8cvg

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00904 Published 2021-08-26 No fix listed CWE-79
TI-2021-04034 CVE-2021-20809 · GHSA-53cw-v2f6-28h4

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Mo…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.009 Published 2021-08-26 No fix listed CWE-79
TI-2021-04033 CVE-2021-20808 · GHSA-j2cp-gw4q-c3gq

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.009 Published 2021-08-26 No fix listed CWE-79
TI-2020-04547 CVE-2020-5577 · GHSA-qq4g-m927-9x4x

Unrestricted file upload in Six Apart Ltd. Movable Type

Priority MEDIUM 42

Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Ty…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01733 Published 2020-05-14 No fix listed CWE-434
TI-2020-04546 CVE-2020-5576 · GHSA-3pqr-r447-f4mh

Cross-site request forgery in Six Apart Ltd. Movable Type

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Ty…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00843 Published 2020-05-14 No fix listed CWE-352
TI-2020-04545 CVE-2020-5575 · GHSA-fpmm-r4rm-5rg2

Cross-site scripting in Six Apart Ltd. Movable Type

Priority LOW 29

Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0095 Published 2020-05-14 No fix listed CWE-79
TI-2020-04544 CVE-2020-5574 · GHSA-34jf-34wf-852g

Injection in Six Apart Ltd. Movable Type

Priority LOW 26

HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01206 Published 2020-05-14 No fix listed CWE-74
TI-2020-04498 CVE-2020-5528 · GHSA-5928-fcw8-m7f4

Cross-site scripting in Six Apart Ltd. Movable Type series

Priority LOW 29

Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable Type 6.5.2 and earlier (Movable Type 6.5), Movable Type Advanced 7 r.4603 and earlier (Movable Type A…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00839 Published 2020-02-06 No fix listed CWE-79
TI-2019-04314 CVE-2019-6025 · GHSA-cc2h-7vfw-mgxv

Open redirect in Six Apart Ltd. Movable Type series

Priority LOW 29

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00851 Published 2019-12-26 No fix listed CWE-601
TI-2016-04984 CVE-2016-5742 · GHSA-w3hp-vvq9-qjxg

SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x…

Priority MEDIUM 45

SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Type Open Source 5.2.13 and earlier allows remote attackers to execute arbitrary S…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01644 Published 2017-01-23 No fix listed CWE-89
Load more