This issue exists due to insufficient validation of user-supplied input for the `Pre-shared key` parameter at the web interface. A remote attacker could exploit this by supplying specially crafted input to the parameter, potentially allowing them to perform stored XSS attacks on the targeted system.