What’s Vulnerable › Vulnerabilities

CVE-2019-25392: Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-16 · updated 2026-06-17
• Weakness: CWE-79

Description

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the IP parameter. Attackers can send POST requests to the iptools.cgi endpoint with script payloads in the IP parameter to execute arbitrary JavaScript in victim browsers.

Affected products

• Smoothwall Express: 3.1-sp4

References

• http://www.smoothwall.org
• https://www.exploit-db.com/exploits/46333
• https://www.vulncheck.com/advisories/smoothwall-express-iptoolscgi-cross-site-scripting

Get alerted when CVE-2019-25392 or the next vulnerability affects your stack