MEDIUM 4.8 NVD
CVE-2013-20009
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name p
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.
References
- https://www.exploit-db.com/exploits/24476
- https://www.s3cur1ty.de/m1adv2013-016
- https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-stored-xss-via-policy
This medium severity vulnerability with a CVSS score of 4.8 was published on 2026-10-28 via NVD.
vulnfeed aggregates 17800 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.