Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Password feature.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')