Netgear XR500 cross site scripting [CVE-2021-38534]