As you can see it's possible to inject HTML/Javascript in the attack page via the ssid.

Steps to reproduce

1. Create a beacon with the tag you wan't to inject as SSID (e.g. <svg onload="alert('1')"/> )
2. Select the beacon as target
3. Switch to the attack page

Screenshots