CVE-2013-20009 Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter

MediumCVSS 4.8 EPSS 0.22%

Published: 2026-10-28 04:03
Updated: 2026-11-03 15:17
Exploit status: No public exploit known

Description

Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.

Affected products

Product	Affected versions	Fixed in
linksys wag200g	<= 1.01.06	No fix listed

References

s3cur1ty Advisory m1adv2013-016: Linksys WAG200G Multiple Vulnerabilities third-party-advisory
ExploitDB-24476: Linksys WAG200G Multiple Vulnerabilities exploit
VulnCheck Advisory: Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter third-party-advisory

CVSS v4.0

4.8 Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: High
User Interaction: Passive
Vulnerable System Confidentiality: None
Vulnerable System Integrity: None
Vulnerable System Availability: None
Subsequent System Confidentiality: Low
Subsequent System Integrity: Low
Subsequent System Availability: None

All scores (4)

v4.0 4.8 · vulncheck
v4.0 4.8 · disclosure@vulncheck.com
v3.1 4.8 · vulncheck
v3.1 4.8 · disclosure@vulncheck.com

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.22% (percentile 13.0)
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.