MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.
modx modx revolution