AxiomSL's Axiom Google Web Toolkit module 9.5.3 and previous versions allows remote malicious users to inject HTML into the scoping dashboard features.
axiomsl axiom