https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:01:47 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0493 certfr-2025-avi-0493 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0493 https://cve.radiocsirt.org/vuln/euvd-2026-258391 EUVD-2026-258391 https://cve.radiocsirt.org/vuln/euvd-2026-258391 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28447 <p>Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user&#39;s browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application&#39;s behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.</p> <p>Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user&#39;s browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application&#39;s behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28447 https://cve.radiocsirt.org/vuln/ghsa-7j98-h7fp-4vwj <p><strong>Affected:</strong> Packagist: smarty/smarty</p> <p>### Impact An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user&#39;s browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application&#39;s behavior, or unauthorized actions performed on behalf of the user.</p> <p>### Patches Please upgrade to the most recent version of Smarty v3 or v4.</p> <p>### For more information If you have any questions or comments about this advisory please open an issue in [the Smarty repo](https://github.com/smarty-php/smarty)</p> <p><strong>Affected:</strong> Packagist: smarty/smarty</p> <p>### Impact An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user&#39;s browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application&#39;s behavior, or unauthorized actions performed on behalf of the user.</p> <p>### Patches Please upgrade to the most recent version of Smarty v3 or v4.</p> <p>### For more information If you have any questions or comments about this advisory please open an issue in [the Smarty repo](https://github.com/smarty-php/smarty)</p> https://cve.radiocsirt.org/vuln/ghsa-7j98-h7fp-4vwj https://cve.radiocsirt.org/vuln/gsd-2023-28447 gsd-2023-28447 https://cve.radiocsirt.org/vuln/gsd-2023-28447 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28447 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: civicrm, Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:Pro:18.04:LTS: civicrm, Ubuntu:Pro:18.04:LTS: postfixadmin, Ubuntu:Pro:18.04:LTS: smarty3, Ubuntu:20.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: civicrm, Ubuntu:Pro:20.04:LTS: postfixadmin, Ubuntu:22.04:LTS: smarty3, Ubuntu:Pro:22.04:LTS: civicrm and 3 more</p> <p>Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user&#39;s browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application&#39;s behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: civicrm, Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:Pro:18.04:LTS: civicrm, Ubuntu:Pro:18.04:LTS: postfixadmin, Ubuntu:Pro:18.04:LTS: smarty3, Ubuntu:20.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: civicrm, Ubuntu:Pro:20.04:LTS: postfixadmin, Ubuntu:22.04:LTS: smarty3, Ubuntu:Pro:22.04:LTS: civicrm and 3 more</p> <p>Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user&#39;s browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application&#39;s behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28447 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0849 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0849