CVE-2018-25047

In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
smartysmarty
𝑥
< 3.1.47
smartysmarty
4.0.0 ≤
𝑥
< 4.2.1
debiandebian_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
smarty3
bullseye (security)
vulnerable
bullseye
no-dsa
bookworm
3.1.47-2
fixed
sid
3.1.48-1
fixed
smarty4
bookworm
4.3.0-1+deb12u1
fixed
bullseye
no-dsa
sid
4.5.4-1
fixed
trixie
4.5.4-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
smarty3
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
ignored
smarty4
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
Common Weakness Enumeration
References
https://bugs.gentoo.org/870100
https://github.com/smarty-php/smarty/issues/454
https://github.com/smarty-php/smarty/releases/tag/v3.1.47
https://github.com/smarty-php/smarty/releases/tag/v4.2.1
https://lists.debian.org/debian-lts-announce/2023/01/msg00002.html
https://security.gentoo.org/glsa/202209-09
https://bugs.gentoo.org/870100
https://github.com/smarty-php/smarty/issues/454
https://github.com/smarty-php/smarty/releases/tag/v3.1.47
https://github.com/smarty-php/smarty/releases/tag/v4.2.1
https://lists.debian.org/debian-lts-announce/2023/01/msg00002.html
https://security.gentoo.org/glsa/202209-09