On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).Referenceshttps://drive.google.com/open?id=1puObYuPWktesaVW1SO8uvSr1g4SnAtAwhttps://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Gohttps://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-netisdl4323.html
