The gregs-high-performance-seo plugin prior to 1.6.2 for WordPress has XSS in the context of an old browser.
greg\\'s high performance seo project greg\\'s high performance seo