Lucene search
+L

3 matches found

Mageia
Mageia
added 2023/01/24 7:58 a.m.53 views

Updated php-smarty packages fix security vulnerability

It was discovered that there was a potential cross-site scripting vulnerability in smarty3, a widely-used PHP templating engine. In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smartyfunctionmailto, and that could be parameterized...

5.4CVSS3.1AI score0.00857EPSS
SaveExploits1References3
Mageia
Mageia
added 2022/06/13 8:44 p.m.51 views

Updated php-smarty packages fix security vulnerability

Template authors could inject php code by choosing a malicious block name or include file name. CVE-2022-29221...

8.8CVSS2.7AI score0.04841EPSS
SaveExploits1References4
Mageia
Mageia
added 2022/04/02 10:22 p.m.134 views

Updated php-smarty packages fix security vulnerability

Updated php-smarty packages to version 4 for php 8 compatibility and to fix security vulnerabilities...

9.8CVSS3.8AI score0.82316EPSS
SaveExploits4References3
Rows per page
Query Builder