CVE-2017-1000480: Smarty PHP code injection – CVSS 9.8 · Watchpost