CVE-2019-25390: Smoothwall Express 3.1 'interfaces.cgi' Cross-Site Scripting

Security readout for executives and security teams

CVE-2019-25390 is a reflected cross-site scripting issue in Smoothwall Express 3.1. An attacker who can reach the admin web interface could trick an authenticated administrator into submitting crafted input, causing attacker-controlled JavaScript to run in that admin session. Business impact is mainly admin-session compromise risk, not direct remote takeover by itself. Exposure is most relevant where Smoothwall Express 3.1 administrative interfaces are reachable by untrusted users or broad internal networks. Risk increases if administrators routinely access the interface from browsers that can be targeted through phishing or malicious links. Treat as a targeted management-interface risk. Prioritize remediation if Smoothwall Express 3.1 is still in use, especially where the admin interface is broadly reachable. This is not presented as actively exploited in the supplied sources. Mitigation focus: Check Smoothwall vendor guidance for fixed versions or supported upgrade paths.; Restrict access to the Smoothwall administrative interface to trusted management networks.; Use VPN or bastion access for administration where feasible..

Prepared

Apr 30, 2026, 01:42 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.