Medium · 5.9 CVE-2023-41661 EUVD-2023-46153GHSA-hc7f-qpr3-xp9p

WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS)

Published Sep 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.

Vendor	Product	Affected	Fixed
PressPage Entertainment	Smarty for WordPress	≤ 3.1.35	—