XSS in Linksys Ea6500

CVE-2013-3065

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (52.1th percentile) — read the EPSS interpretation.

Affected products

Linksys Ea6500
Linksys Ea6500_firmware — versions 1.1.28.147876
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)