VULNERABILITY INTELLIGENCE
CVE-2019-25234
CVSS score5.3 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-12-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious scripts into various application parameters.
Weakness classification
- disclosure@vulncheck.com: CWE-79