PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.
stivasoft phpjabbers star rating script 4.0