{"schema":"threatline.record/2","record":{"id":"CVE-2013-20009","aliases":[],"summary":"Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter","details":"Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.","categories":["Network & edge"],"product":"WAG200G","vendor":"Linksys","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2013-20009","source_modified_at":"2026-10-28T02:03:11.721Z","fetched_at":"2026-10-28T08:18:35.509402Z","product":"WAG200G","vendor":"Linksys","versions":[{"version":"0","status":"affected","versionType":"custom","lessThanOrEqual":"1.01.06"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":4.8,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T02:03:11.721Z","modified_at":"2026-10-28T02:03:11.721Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2013-20009","fetched_at":"2026-10-28T08:18:35.509402Z","source_modified_at":"2026-10-28T02:03:11.721Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.s3cur1ty.de/m1adv2013-016","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/24476","tags":["exploit"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-stored-xss-via-policy-name-parameter","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T02:03:11.721Z","content_hash":"0717ef5ceeccf09c9f308d63658d26f8aaee25809c69ed62aab98e95c2156e5a"}}