Read the docs

SmartDataSoft

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

SmartDataSoft records in CISA KEV

No SmartDataSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Essential Wp Real Estate 3 records MEDIUM Smartblog 2 records HIGH Car Repair Services & Auto Mechanic 1 record LOW Clasify Classified Listing 1 record MEDIUM

Records

2 records in Smartblog · all components

TI-2021-15428 CVE-2021-37538 · GHSA-8v9p-7c45-26j2

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before…

Priority HIGH 81

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controll…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.74489 Published 2021-08-24 No fix listed CWE-89
TI-2020-19107 CVE-2020-36972 · GHSA-h5jp-4qg2-hm8r

SmartBlog 2.0.1 - 'id_post' Blind SQL injection

Priority HIGH 77

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to extract database information.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00335 Published 2026-01-28 No fix listed CWE-89
Open these records in search →