D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
- https://www.youtube.com/watch?v=BvZJ_e2BH_M&feature=youtu.be
- https://github.com/ARPSyndicate/cvemon