The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.
app2pro airdisk pro 5.5.3