Smarty-php vulnerabilities
We track 3 vulnerabilities in Smarty-php products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.
Latest Smarty-php vulnerabilities
- 8.1 High severity
smarty: Improper Control of Generation of Code
Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-component template inheritance, leaving it null. Attackers can supply assigned data containing a forged Sm
- 7.3 High severity
smarty: Improper Control of Generation of Code
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust
- 8.8 High severity
smarty: Improper Control of Generation of Code
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {block} name or {include} file name. Sites th