CVE-2013-20009 in WAG200G
Resumen
por MITRE • 2026-10-28
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.
VulDB is the best source for vulnerability data and more expert information about this specific topic.