Medium severity4.8NVD Advisory· Published Jan 15, 2025· Updated Jun 17, 2026
CVE-2025-22997
CVE-2025-22997
Description
A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter.
Affected products
3- cpe:2.3:o:linksys:e5600_firmware:1.1.0.26:*:*:*:*:*:*:*
1.1.0.26+ 1 more
- (no CPE)range: 1.1.0.26
- (no CPE)
Patches
Vulnerability mechanics
References
1- github.com/SunnyYANGyaya/firmcrosser/blob/main/Linksys/E5600-1.mdnvdBroken LinkExploit
News mentions
0No linked articles in our index yet.