The count-per-day plugin prior to 3.2.3 for WordPress has XSS via search words.
count per day project count per day