Draytek VigorAP suffers from a persistent cross site scripting vulnerability. Multiple different versions are affected.