Login Request a demo
SM
Product
Smarty
by Smarty · last CVE Sep 29, 2023
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 4High 5Medium 4Low 0
Severity
All severities31Critical4High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Smarty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-28447
6.1
1%
Mar 28
Smarty is a template engine for PHP
Affected: before 3.1.48; 4.0.0 before 4.3.1
CVE-2018-16831
5.9
3%
Sep 11
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement
Affected: 3.0.0 through 3.1.32
CVE-2018-25047
5.4
1%
Sep 15
In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS
Affected: before 3.1.47; 4.0.0 before 4.2.1
CVE-2023-41661
4.8
0%
Sep 29
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions
Affected: through 3.1.35
Showing 4