EIP-2026-102147

This exploit demonstrates a stored XSS vulnerability in ZyXEL VMG3312-B10B via the 'hostname' parameter in a POST request. The payload 'X<svg onload=alert()>' triggers when the malicious input is rendered in the connection status page.