CVE-2012-4277

Published: Aug 13, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function in distribution/libs/plugins/function.html_options.php in Smarty before 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (87)

Products: Smarty: Smarty

Smarty

1 product

Smarty

Configuration A

87 vulnerable

Vulnerable Software	Affected Versions
Smarty Smarty	Up to 3.1.7
Smarty Smarty	Version 1.0
Smarty Smarty	Version 1.0a
Smarty Smarty	Version 1.0b
Smarty Smarty	Version 1.1.0
Smarty Smarty	Version 1.2.0
Smarty Smarty	Version 1.2.1
Smarty Smarty	Version 1.2.2
Smarty Smarty	Version 1.3.0
Smarty Smarty	Version 1.3.1
Smarty Smarty	Version 1.3.2
Smarty Smarty	Version 1.4.0
Smarty Smarty	Version 1.4.0 b1
Smarty Smarty	Version 1.4.0 b2
Smarty Smarty	Version 1.4.1
Smarty Smarty	Version 1.4.2
Smarty Smarty	Version 1.4.3
Smarty Smarty	Version 1.4.4
Smarty Smarty	Version 1.4.5
Smarty Smarty	Version 1.4.6
Smarty Smarty	Version 1.5.0
Smarty Smarty	Version 1.5.1
Smarty Smarty	Version 1.5.2
Smarty Smarty	Version 2.0.0
Smarty Smarty	Version 2.0.1
Smarty Smarty	Version 2.1.0
Smarty Smarty	Version 2.1.1
Smarty Smarty	Version 2.2.0
Smarty Smarty	Version 2.3.0
Smarty Smarty	Version 2.3.1
Smarty Smarty	Version 2.4.0
Smarty Smarty	Version 2.4.1
Smarty Smarty	Version 2.4.2
Smarty Smarty	Version 2.5.0
Smarty Smarty	Version 2.5.0 rc1
Smarty Smarty	Version 2.5.0 rc2
Smarty Smarty	Version 2.6.0
Smarty Smarty	Version 2.6.0 rc1
Smarty Smarty	Version 2.6.0 rc2
Smarty Smarty	Version 2.6.0 rc3
Smarty Smarty	Version 2.6.10
Smarty Smarty	Version 2.6.11
Smarty Smarty	Version 2.6.12
Smarty Smarty	Version 2.6.13
Smarty Smarty	Version 2.6.14
Smarty Smarty	Version 2.6.15
Smarty Smarty	Version 2.6.16
Smarty Smarty	Version 2.6.17
Smarty Smarty	Version 2.6.18
Smarty Smarty	Version 2.6.1
Smarty Smarty	Version 2.6.20
Smarty Smarty	Version 2.6.22
Smarty Smarty	Version 2.6.24
Smarty Smarty	Version 2.6.25
Smarty Smarty	Version 2.6.26
Smarty Smarty	Version 2.6.2
Smarty Smarty	Version 2.6.3
Smarty Smarty	Version 2.6.4
Smarty Smarty	Version 2.6.5
Smarty Smarty	Version 2.6.6
Smarty Smarty	Version 2.6.7
Smarty Smarty	Version 2.6.9
Smarty Smarty	Version 3.0.0
Smarty Smarty	Version 3.0.0 beta4
Smarty Smarty	Version 3.0.0 beta5
Smarty Smarty	Version 3.0.0 beta6
Smarty Smarty	Version 3.0.0 beta7
Smarty Smarty	Version 3.0.0 beta8
Smarty Smarty	Version 3.0.0 rc1
Smarty Smarty	Version 3.0.0 rc2
Smarty Smarty	Version 3.0.0 rc3
Smarty Smarty	Version 3.0.0 rc4
Smarty Smarty	Version 3.0.1
Smarty Smarty	Version 3.0.2
Smarty Smarty	Version 3.0.3
Smarty Smarty	Version 3.0.4
Smarty Smarty	Version 3.0.5
Smarty Smarty	Version 3.0.6
Smarty Smarty	Version 3.0.7
Smarty Smarty	Version 3.1.0
Smarty Smarty	Version 3.1.1
Smarty Smarty	Version 3.1.2
Smarty Smarty	Version 3.1.3
Smarty Smarty	Version 3.1.4
Smarty Smarty	Version 3.1.5
Smarty Smarty	Version 3.1.6
Smarty Smarty	Version 3.1 rc1