Administrator script execution via stored hostname input

Stored XSS in ELECOM WAB-BE access points allows remote authenticated users to run script in another administrator's browser. The administration interface stores a hostname parameter without adequate handling and later renders it to a different administrator's browser. An administrator must submit crafted hostname data, and a second administrator must load the affected interface; resulting script runs in that user's browser context.