Known vulnerabilities in Movable Type Cloud Edition

Vendor: Six Apart Ltd
Software: Movable Type Cloud Edition
Software CPE: cpe:2.3:a:six_apart:movable_type_cloud_edition:*:*:*:*:*:*:*:*
Website: https://movabletype.com
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Movable Type Cloud Edition Movable Type Cloud Edition is affected by 12 known vulnerabilities: 4 medium, 8 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122296 - Improper Neutralization of Formula Elements in a CSV File
CVE-2026-24447		 CWE-1236 Medium
No
No
 8.8.2, 9.1.0 04.02.2026 SB2026020430
#VU122294 - Unrestricted Upload of File with Dangerous Type
CVE-2026-23704		 CWE-434 Medium
No
No
 8.8.2, 9.1.0 04.02.2026 SB2026020430
#VU122292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22875		 CWE-79 Low
No
No
 8.8.2, 9.1.0 04.02.2026 SB2026020430
#VU122291 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21393		 CWE-79 Low
No
No
 8.8.2, 9.1.0 04.02.2026 SB2026020430
#VU117532 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62499		 CWE-79 Low
No
No
 r.5510, 8.8.0 22.10.2025 SB20251022153
#VU117530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54856		 CWE-79 Low
No
No
 r.5510, 8.8.0 22.10.2025 SB20251022153
#VU114233 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-55706		 CWE-601 Medium
No
No
 r.5509, 8.7.0 20.08.2025 SB2025082007
#VU114232 - Use of Less Trusted Source
CVE-2025-53522		 CWE-348 Medium
No
No
 r.5509, 8.7.0 20.08.2025 SB2025082007
#VU104052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25054		 CWE-79 Low
No
No
 8.5.0 19.02.2025 SB202502197121
#VU104051 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24841		 CWE-79 Low
No
No
 8.5.0 19.02.2025 SB202502197121
#VU104050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22888		 CWE-79 Low
No
No
 8.5.0 19.02.2025 SB202502197121
#VU82357 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45746		 CWE-79 Low
No
No
 r.5501 25.10.2023 SB2023102507