The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.
blubrry powerpress 6.0.4