CVE-2013-3065: Linksys EA6500

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.

Affected products

• Linksys EA6500
• Linksys EA6500 Firmware: version 1.1.28.147876 only

Published 2014-09-29. Last modified 2026-06-16.