The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
mgl-instagram-gallery project mgl-instagram-gallery -