Ssmarty-php

Products

Exploited and recent CVEs

• CVE-2026-82531 High 8.1 Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache 0.8%
• CVE-2026-62993 Medium 6.9 Smarty: SSRF via redirect bypass of trusted_uri using {fetch} 0.6%
• CVE-2026-62996 Medium 6.9 Smarty Security stream restriction bypass through stream: resource 0.5%
• CVE-2026-62992 Medium 6.9 Smarty: Symlink path traversal out of trusted directories 0.5%
• CVE-2024-35226 High 7.3 PHP Code Injection by malicious attribute in extends-tag in Smarty 0.5%
• CVE-2023-28447 High 7.1 Cross site scripting vulnerability in Javascript escaping in smarty/smarty 1.0%
• CVE-2022-29221 High 8.8 PHP Code Injection by malicious block or filename in Smarty 4.9%
• CVE-2021-29454 High 8.1 Sandbox Escape by math function in smarty 1.9%
• CVE-2021-21408 High 8.8 Access to restricted PHP code by dynamic static class access in smarty 2.1%