Cobham Satcom Sailor 800 and 900 devices contained persistent XSS which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file inserting an XSS payload into a relevant field (e.g. Satellite name) and then restoring the malicious configuration file.