What is GHSA-x9c2-j44q-2h83?

GHSA-x9c2-j44q-2h83 is a security advisory published by GitHub Security Advisories with Medium severity. Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows...

Which CVE IDs does GHSA-x9c2-j44q-2h83 cover?

GHSA-x9c2-j44q-2h83 covers the following CVE IDs: CVE-2013-20009. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x9c2-j44q-2h83?

GHSA-x9c2-j44q-2h83 has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

GHSA-x9c2-j44q-2h83MediumCVSS 4.8

Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2013-20009 →

📋 Description

Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2013-20009
https://www.exploit-db.com/exploits/24476
https://www.s3cur1ty.de/m1adv2013-016
https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-stored-xss-via-policy-name-parameter
https://github.com/advisories/GHSA-x9c2-j44q-2h83