Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.
- https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.html
No PoCs found on GitHub currently.