Linksys E5600 Router Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Linksys E5600 Router, specifically in version 1.1.0.26. This vulnerability allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the 'desc' parameter of the 'spf_table_content' component.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, log into the Linksys E5600 Router with version 1.1.0.26. Navigate to the 'spf_table_content' component and inject a script or HTML payload into the 'desc' parameter. Once the payload is submitted, it will be executed, demonstrating the cross-site scripting vulnerability.