D-Link DIR-615 T1 devices allow XSS via the Add User feature.
- http://packetstormsecurity.com/files/147184/D-Link-DIR-615-Cross-Site-Scripting.html
- https://www.exploit-db.com/exploits/44473/
No PoCs found on GitHub currently.