DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.
dnnsoftware dotnetnuke 9.1.1