Unrated severityNVD Advisory· Published Jun 28, 2010· Updated Jun 16, 2026

CVE-2010-2506

Description

Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter.

Affected products

Cisco Systems, Inc./Linksys Wap54g
cpe:2.3:h:cisco:linksys_wap54g:*:*:*:*:*:*:*:*
Cisco Systems, Inc./Linksys Firmware2 versions
cpe:2.3:o:cisco:linksys_firmware:3.04.03:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:linksys_firmware:3.04.03:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:linksys_firmware:3.05.03:*:*:*:*:*:*:*
Linksys/Wap54gv3llm-fuzzy
Range: firmware 3.05.03, 3.04.03

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/511952/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/59699nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000