Smarty-Php

9 CVEs across 1 Smarty-Php products. Browse Smarty-Php vulnerabilities, severities, and proof-of-concept exploits.

Smarty-Php products with known CVEs

ProductCVEs
Smarty9
Smarty-Php CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-82531High8.12026-10-06Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-compo…
CVE-2026-629932026-08-31Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 4.5.7 and 5.8.2, depending on the…
CVE-2026-629962026-08-07Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4, Smarty's stream: re…
CVE-2026-629922026-08-07Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line)…
CVE-2024-35226High7.32024-05-28Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could…
CVE-2023-28447High7.12023-03-28Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execu…
CVE-2022-29221High8.82022-05-24Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, templat…
CVE-2021-29454High8.12022-01-10Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.42 and 4.0.2, templat…
CVE-2021-21408High8.82022-01-10Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.43 and 4.0.3, templat…