This video shows the vulnerabilities that can be seen using level 0 and level 1 in OWASP that allows for XSS to be injected inside the Useragent with HTML Script tags.You can see how this could be developed to be used to the attackers advantage.
آی-ویدئو