https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:01:39.732174+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25382 CVE-2019-25382 — Smoothwall Express 3.1 'time.cgi' Cross-Site Scripting 2026-10-07T06:01:39.754914+00:00

Affected: Smoothwall Express

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the NTP_SERVER parameter. Attackers can send POST requests to the time.cgi endpoint with script payloads in the NTP_SERVER parameter to execute arbitrary JavaScript in users' browsers.