Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-26120
9.8
CRITICALCVSS v3
Published
February 22, 2021
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.
smarty-php/smarty
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.< 3.1.39NVD
Packagist