The all-in-one-schemaorg-rich-snippets plugin prior to 1.5.0 for WordPress has XSS on the settings page.
brainstormforce schema