DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
- https://hackings8n.blogspot.com/2018/06/cve-2018-12705-digisol-wireless-router.html
- https://www.exploit-db.com/exploits/44935/
No PoCs found on GitHub currently.