The CampTix Event Ticketing plugin prior to 1.5 for WordPress allows XSS in the admin section via a ticket title or body.
automattic camptix event ticketing