CVE-2012-4437

Cross-site scripting (XSS) vulnerability in the SmartyException class in Smarty (aka smarty-php) before 3.1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger a Smarty exception.

Date published : 2012-09-30

http://www.securityfocus.com/bid/55506

http://advisories.mageia.org/MGASA-2014-0468.html