Swagger-UI prior to 2.2.1 has XSS via the Default field in the Definitions section.
smartbear swagger-ui