CVE-2010-2506

EXPLOITED

Cisco Linksys Firmware - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter.

References (2)

Scores

EPSS 0.0016
EPSS Percentile 36.9%

Exploitation Intel

VulnCheck KEV 2024-05-22

Classification

CWE
CWE-79
Status published

Affected Products (4)

cisco/linksys_firmware
cisco/linksys_firmware
cisco/linksys_wap54g
n/a/n/a

Timeline

Published Jun 28, 2010
Tracked Since Feb 18, 2026