The mtouch-quiz plugin prior to 3.1.3 for WordPress has XSS via a quiz name.
mtouch quiz project mtouch quiz