Cross site scripting

XSS exists on D-Link DWR-933 1.00WWB17 devices via cgi-bin/gui.cgi...