CVE-2019-13491

This exploit demonstrates a stored XSS vulnerability in Tenda D301 v2 modem routers. The payload is injected into the wireless security password field, triggering when the 'click to display' button is pressed.