CVE-2019-25397 | IPFire up to 2.21 POST Request hosts.cgi KEY1/IP/HOST/DOM cross site scripting (Exploit 46344 / EDB-46344)

February 19, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in IPFire up to 2.21. This affects an unknown part of the file hosts.cgi of the component POST Request Handler. This manipulation of the argument KEY1/IP/HOST/DOM causes cross site scripting.

This vulnerability is handled as CVE-2019-25397. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More