Known vulnerabilities in Smarty 3.1.38

Software: Smarty
Version: 3.1.38
Software CPE: cpe:2.3:a:smarty_php_net:smarty:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 8
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Smarty version 3.1.38 Smarty 3.1.38 is affected by 8 vulnerabilities: 3 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89862 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-35226
CWE-94 High
No
No
4.5.3, 5.2.0 29.05.2024 SB2024052913
SB20241210108
SB2024121303
and 3 more
#VU74151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28447
CWE-79 Low
No
No
3.1.48, 4.3.1 29.03.2023 SB2023032901
SB20230818172
SB20230818173
and 7 more
#VU67636 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-25047
CWE-79 Medium
No
No
3.1.47, 4.2.1 26.09.2022 SB2022092607
SB2022092631
SB2024121303
#VU63344 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-29221
CWE-94 High
Public exploit available
No
3.1.45, 4.1.1 17.05.2022 SB2022051727
SB2022053020
SB2022092631
and 5 more
#VU61665 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21408
CWE-94 Medium
No
No
3.1.43, 4.0.3 28.03.2022 SB2022032834
SB2022032835
SB2022053020
and 4 more
#VU61664 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-29454
CWE-94 High
No
No
3.1.42, 4.0.2 28.03.2022 SB2022032833
SB2022032835
SB2022053020
and 4 more
#VU50870 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26120
CWE-94 Medium
Public exploit available
No
3.1.39 23.02.2021 SB2021022311
SB2021052605
SB2022032835
and 4 more
#VU50869 - Permissions, Privileges, and Access Controls
CVE-2021-26119
CWE-264 Medium
Public exploit available
No
3.1.39 23.02.2021 SB2021022311
SB2021052605
SB2022032835
and 4 more