Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.
netis-systems wf2419_firmware 2.2.36123