Known vulnerabilities in Movable Type Premium Advanced

Vendor: Six Apart Ltd
Software: Movable Type Premium Advanced
Software CPE: cpe:2.3:a:six_apart:movable_type_premium_advanced:*:*:*:*:*:*:*:*
Website: https://movabletype.com
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Movable Type Premium Advanced Movable Type Premium Advanced is affected by 23 known vulnerabilities: 2 high, 3 medium, 18 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25054		 CWE-79 Low
No
No
 2.07 19.02.2025 SB202502197121
#VU104051 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24841		 CWE-79 Low
No
No
 2.07 19.02.2025 SB202502197121
#VU104050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22888		 CWE-79 Low
No
No
 2.07 19.02.2025 SB202502197121
#VU82357 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45746		 CWE-79 Low
No
No
 1.59 25.10.2023 SB2023102507
#VU69360 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2022-43660		 CWE-97 Low
No
No
 1.54 16.11.2022 SB2022111605
#VU69359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-45122		 CWE-79 Low
No
No
 1.54 16.11.2022 SB2022111605
#VU69357 - Improper input validation
CVE-2022-45113		 CWE-20 Medium
No
No
 1.54 16.11.2022 SB2022111605
#VU66754 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-38078		 CWE-78 High
No
No
 1.53 25.08.2022 SB2022082506
#VU57555 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20837		 CWE-78 High
Available
No
 1.47 20.10.2021 SB2021102007
#VU56071 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20812		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082502
#VU56070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20815		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082502
#VU56069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20811		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082502
#VU56068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20810		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082502
#VU56066 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20809		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082502
#VU56065 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20808		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082502
#VU50903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20665		 CWE-79 Low
No
No
 7.6.0 24.02.2021 SB2021022403
#VU50902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20664		 CWE-79 Low
No
No
 6.7.6, 7.6.0 24.02.2021 SB2021022403
#VU50901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20663		 CWE-79 Low
No
No
 6.7.6, 7.6.0 24.02.2021 SB2021022403
#VU48518 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5669		 CWE-79 Low
No
No
 1.38 18.11.2020 SB2020111812
#VU27916 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-5574		 CWE-74 Medium
No
No
 - 14.05.2020 SB2020051413


Showing elements 1 - 20 out of 23