CVE-2025-29231

Medium CVSS: 6.1

A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hostname and domainName parameters.

Vendor

Linksys

Product

E5600 Firmware

CWE

CWE-79

Yayın Tarihi

2025-12-16 17:16:07

Güncelleme

2025-12-31 00:30:16

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-79 E5600 Firmware MEDIUM Linksys 2025

Referanslar

https://github.com/JZP018/Vuln/blob/main/linsys/E5600/XSS_wan_name/XSS_wan_name.md https://github.com/Suryaandave/CVES/tree/main/CVE-2025-29231

Benzer Kayıtlar

Medium

CVE-2026-25603

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys…

Critical

CVE-2025-29228

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

Critical

CVE-2025-29229

linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.

High

CVE-2025-52692

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft…

High

CVE-2025-14136

A security flaw has been discovered in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/…

High

CVE-2025-14135

A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.0…