smarty
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 35 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 29, 2005 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache
Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
Smarty Security stream restriction bypass through stream: resource
WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS)
Cross site scripting vulnerability in Javascript escaping
smarty_function_mailto - JavaScript injection in eval function
PHP Code Injection by malicious block or filename
Access to restricted PHP code by dynamic static class access
Sandbox Escape by math function
Smarty_Internal_Runtime_TplFunction Sandbox Escape PHP Code Injection
Monitor smarty in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.