Known vulnerabilities in Movable Type - page 2

Software: Movable Type
Software CPE: cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:*
Total vulnerabilities: 44
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Movable Type Movable Type is affected by 44 known vulnerabilities: 4 high, 12 medium, 28 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56072 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20813
CWE-79 Low
No
No
7.8.0 25.08.2021 SB2021082502
#VU56070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20815
CWE-79 Low
No
No
6.8.1, 7.8.0 25.08.2021 SB2021082502
#VU56069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20811
CWE-79 Low
No
No
6.8.1, 7.8.0 25.08.2021 SB2021082502
#VU56068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20810
CWE-79 Low
No
No
6.8.1, 7.8.0 25.08.2021 SB2021082502
#VU56066 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20809
CWE-79 Low
No
No
6.8.1, 7.8.0 25.08.2021 SB2021082502
#VU56065 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20808
CWE-79 Low
No
No
6.8.1, 7.8.0 25.08.2021 SB2021082502
#VU50903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20665
CWE-79 Low
No
No
7.6.0 24.02.2021 SB2021022403
#VU50902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20664
CWE-79 Low
No
No
6.7.6, 7.6.0 24.02.2021 SB2021022403
#VU50901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20663
CWE-79 Low
No
No
6.7.6, 7.6.0 24.02.2021 SB2021022403
#VU27919 - Unrestricted Upload of File with Dangerous Type
CVE-2020-5577
CWE-434 Medium
No
No
6.3.12, 6.6, 7.3 14.05.2020 SB2020051413
#VU27918 - Cross-Site Request Forgery (CSRF)
CVE-2020-5576
CWE-352 Low
No
No
6.3.12, 6.6, 7.3 14.05.2020 SB2020051413
#VU27917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5575
CWE-79 Low
No
No
6.3.12, 6.6, 7.3 14.05.2020 SB2020051413
#VU27916 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-5574
CWE-74 Medium
No
No
6.3.12, 6.6, 7.3 14.05.2020 SB2020051413
#VU25337 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.2 13.02.2020 SB2020021335
#VU25336 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.5.3, 7.2 13.02.2020 SB2020021335
#VU24999 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5528
CWE-79 Low
No
No
6.3.11, 7.2 06.02.2020 SB2020020602
#VU22728 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-6025
CWE-601 Low
No
No
- 13.11.2019 -
#VU40885 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2015-1592
CWE-74 Medium
Available
No
6.0.7 19.02.2015 SB2015021905
#VU41363 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1503
CWE-79 Low
Available
No
- 29.08.2014 -
#VU43157 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-0209
CWE-89 Medium
Available
No
- 23.01.2013 -


Showing elements 21 - 40 out of 44