OpenPLC ScadaBR up to and including 0.9.1 on Linux and up to and including 1.12.4 on Windows allows stored XSS via system_settings.shtm.
openplcproject scadabr