Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.
[
{
"product": "Philips In.Sight B120/37",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Philips In.Sight B120/37"
}
]
}
]