https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:08:36.806596+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-258279 EUVD-2026-258279 2026-10-04T10:08:36.810345+00:00 EUVD-2026-258279 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25047 fkie_cve-2018-25047 2026-10-04T10:08:36.810393+00:00

In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.

 https://cve.radiocsirt.org/vuln/ghsa-hwq7-5vv9-c6cf GHSA-hwq7-5vv9-c6cf — Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto 2026-10-04T10:08:36.810440+00:00

Affected: Packagist: smarty/smarty

In Smarty before 3.1.47 and 4.x before 4.2.1, `libs/plugins/function.mailto.php` allows cross-site scripting. A web page that uses `smarty_function_mailto`, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.

 https://cve.radiocsirt.org/vuln/gsd-2018-25047 gsd-2018-25047 2026-10-04T10:08:36.810484+00:00 gsd-2018-25047 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-25047 UBUNTU-CVE-2018-25047 2026-10-04T10:08:36.810507+00:00

Affected: Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:Pro:18.04:LTS: smarty3, Ubuntu:20.04:LTS: smarty3, Ubuntu:22.04:LTS: smarty3, Ubuntu:24.04:LTS: smarty3, Ubuntu:25.10: smarty3, Ubuntu:26.04:LTS: smarty3

In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.