The Modern theme prior to 1.4.2 for WordPress has XSS via the genericons/example.html anchor identifier.
webmandesign modern theme