CVE-2026-33088 | Six Apart Movable Type 5.2/6.0 sql injection

A vulnerability was found in Six Apart Movable Type, Movable Type Advanced, Movable Type Premium and Movable Type Premium Advanced Edition 5.2/6.0 and classified as critical. The impacted element is an unknown function. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-33088. The attack can be executed remotely. There is not any exploit available.