On D-Link DI-524 V2.06RU devices multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration: /spap.htm /smap.htm and /cgi-bin/smap as demonstrated by the cgi-bin/smap RC parameter.