The Headway theme prior to 3.8.9 for WordPress has XSS via the license key field.
headwaythemes headway