Twonky Server prior to 8.5.1 has XSS via a modified "language" parameter in the Language section.
lynxtechnology twonky server