5.18

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-30	CVE-2023-45746	Cross-site Scripting vulnerability in Sixapart Movable Type Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. network low complexity sixapart CWE-79	5.4
2021-10-26	CVE-2021-20837	OS Command Injection vulnerability in Sixapart Movable Type Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. network low complexity sixapart CWE-78	7.5
2018-09-04	CVE-2018-0672	Cross-site Scripting vulnerability in Sixapart Movable Type Cross-site scripting vulnerability in Movable Type versions prior to Ver. network sixapart CWE-79	4.3