The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.
getawesomesupport awesome support