CVE-2023-41661

Description

References

• patchstack.com/database/vulnerability/smarty-for-wordpress/wordpress-smarty-for-wordpress-plugin-3-1-35-cross-site-scripting-xss-vulnerability · Third Party Advisory

Autres vulnérabilités de smarty

• CVE-2023-28447MOYENNE 6.1Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vul…
• CVE-2018-25047MOYENNE 5.4In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and …
• CVE-2022-29221ÉLEVÉE 8.8Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45…
• CVE-2021-29454ÉLEVÉE 8.8Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.42…
• CVE-2021-21408ÉLEVÉE 8.8Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.43…