DNN (formerly DotNetNuke) up to and including 9.4.4 allows XSS (issue 1 of 2).
dnnsoftware dotnetnuke