Loading vulnerability details…
CVSS v3.1
N/A
CVSS v4.0
4.8
EPSS
0.16%
Published
May 13, 2026
Modified
May 13, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser.
Weaknesses (CWE)