K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php.
knet cisco configuration manager