Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:08:32 +0000 EUVD-2026-258279 https://cve.radiocsirt.org/vuln/euvd-2026-258279 EUVD-2026-258279 https://cve.radiocsirt.org/vuln/euvd-2026-258279 fkie_cve-2018-25047 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25047 <p>In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.</p> <p>In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-25047 GHSA-hwq7-5vv9-c6cf — Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto https://cve.radiocsirt.org/vuln/ghsa-hwq7-5vv9-c6cf <p><strong>Affected:</strong> Packagist: smarty/smarty</p> <p>In Smarty before 3.1.47 and 4.x before 4.2.1, `libs/plugins/function.mailto.php` allows cross-site scripting. A web page that uses `smarty_function_mailto`, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.</p> <p><strong>Affected:</strong> Packagist: smarty/smarty</p> <p>In Smarty before 3.1.47 and 4.x before 4.2.1, `libs/plugins/function.mailto.php` allows cross-site scripting. A web page that uses `smarty_function_mailto`, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.</p> https://cve.radiocsirt.org/vuln/ghsa-hwq7-5vv9-c6cf gsd-2018-25047 https://cve.radiocsirt.org/vuln/gsd-2018-25047 gsd-2018-25047 https://cve.radiocsirt.org/vuln/gsd-2018-25047 UBUNTU-CVE-2018-25047 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-25047 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:Pro:18.04:LTS: smarty3, Ubuntu:20.04:LTS: smarty3, Ubuntu:22.04:LTS: smarty3, Ubuntu:24.04:LTS: smarty3, Ubuntu:25.10: smarty3, Ubuntu:26.04:LTS: smarty3</p> <p>In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:Pro:18.04:LTS: smarty3, Ubuntu:20.04:LTS: smarty3, Ubuntu:22.04:LTS: smarty3, Ubuntu:24.04:LTS: smarty3, Ubuntu:25.10: smarty3, Ubuntu:26.04:LTS: smarty3</p> <p>In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-25047