CVE-2019-25395

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.2 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N                                    

Vulnerability Description

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payloads to preferences.cgi to store malicious code that executes in the browsers of users accessing the preferences page.

Vulnerability Details

Published Date

February 16, 2026

Last Modified

February 20, 2026

CWE ID

CWE-79

Source

NVD

Vendor

Smoothwall

Product

Smoothwall Express

External References

http://www.smoothwall.org
https://www.exploit-db.com/exploits/46333
https://www.vulncheck.com/advisories/smoothwall-express-preferencescgi-cross-site-scrip

CVE-2019-25395

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment