XSS in Wi‑Fi SSIDs and LoRa IDs lets attackers inject code into infrastructure UIs
Security researcher Sasha Romijn shows that an XSS flaw in infrastructure web UIs can be weaponized by embedding malicious JavaScript in Wi‑Fi SSIDs or LoRa node names. The trick turns innocuous radio‑frequency identifiers into code delivery vectors, exposing outdated embedded browsers to remote takeover.