MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.
metinfo metinfo 6.0.0