Metazo

metazo

Vendor: Ipwsystems • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-46661

1Ipwsystems

1Metazo

Jun 17, 2026

Apr 28, 2025

N/A· v4

9.8 CRITICAL· v3

N/A· v2

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been...Show more