Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Mova…

Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0…

lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require…

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remot…

Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to tak…

Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote att…

Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT)…

SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before …

Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. …

Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type A…

SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x befor…

Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 al…

Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknow…

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized…

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six…

Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before …

HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2…

Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type al…

Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x be…

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.26…

Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 …

Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permissio…

Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series …

Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and ea…

Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin o…

Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7…

Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r…

Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type…

Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Ty…

Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4…

Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movabl…

Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and …

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (M…

Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (…

Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (M…

Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote a…

Improper validation of syntactic correctness of input vulnerability exist in Movable Type serie…

Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Mo…

Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable T…

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow…