CVE-2010-4726: Smarty

High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669.

Affected products

• Smarty Smarty: up to and including 3.0.0; version 1.0 only; version 1.0a only; version 1.0b only; version 1.1.0 only; version 1.2.0 only; …

Published 2011-02-03. Last modified 2026-06-16.