In PHPSUGAR PHP Melody prior to 2.7.3, page_manager.php has XSS via the page_title parameter.
phpsugar php melody