CVE-2013-3065

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.

Score

CVSS 2.0 3.5 Low

Status

Modified - cve@mitre.org

Published

2014-09-29

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Ea6500 (Linksys)
• Ea6500 Firmware (Linksys)

References

• http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf
• http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php