DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
digisol dg-br4000ng_firmware