https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T18:33:43.587629+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2013-20009 CVE-2013-20009 — Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter 2026-10-30T18:33:43.589477+00:00

Affected: Linksys WAG200G

Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.