CVE-2019-25387 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 POST Request xtaccess.cgi EXT/DEST_PORT/COMMENT cross site scripting (Exploit 46333)

February 16, 2026 Yanac

A vulnerability was found in Smoothwall Express 3.1-SP4-polar-x86_64-update9 and classified as problematic. The impacted element is an unknown function of the file xtaccess.cgi of the component POST Request Handler. Executing a manipulation of the argument EXT/DEST_PORT/COMMENT can lead to cross site scripting.

This vulnerability is registered as CVE-2019-25387. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More