DEBIAN-CVE-2012-4277

Cross-site scripting XSS vulnerability in the smartyfunctionhtmloptionsoptoutput function in distribution/libs/plugins/function.htmloptions.php in Smarty before 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-5305

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.1.8 Description A cross-site scripting XSS issue exists due to insufficient input validation in the smarty function html options optoutput function. This allows remote attackers to inject arbitrary web script or HTML...