Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
sandline centraleyezer -