The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
gleamtech fileultimate 6.1.5.0