Linksys WAG200G routers running firmware 1.01.06 or earlier contain a stored cross‑site scripting flaw that allows an authenticated attacker to inject JavaScript code via the policy_name parameter in setup.cgi. When an administrator later visits the Status > Wireless page, the stored payload executes in the browser, potentially allowing the attacker to harvest session cookies, key‑logging credentials, or redirect the administrator to malicious sites. The impact is limited to the scope of an authenticated administrative session, but it can compromise the confidentiality and integrity of the router configuration if successful.

Linksys WAG200G devices with firmware versions up to and including 1.01.06 are affected. The vulnerability is present in the administrative web interface exposed by these routers.

The CVSS score of 4.8 indicates a moderate level of risk. There is no EPSS data available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to have authenticated access to the router’s web interface, so the threat is largely limited to an internal network or compromised local administrator credentials. Once authenticated, an attacker can inject scripts that will run in administrators’ browsers whenever the vulnerable Status > Wireless page is viewed.