The EventON plugin up to and including 3.0.5 for WordPress allows addons/?q= XSS via the search field.
myeventon eventon