Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30 and DI-704 SOHO router running firmware 2.60B2 and DI-624 allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.