On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).
- https://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Go
No PoCs found on GitHub currently.