Smartdatasoft Smartblog — known CVE vulnerabilities

Every CVE whose affected-product data names Smartdatasoft Smartblog, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-37538 — CVSS 9.8 (critical): Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to…
• CVE-2020-36972 — CVSS 8.2 (high): SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to…