Invision Community IPS Community Suite prior to 4.5.4.2 allows XSS during the quoting of a post or comment.
invisioncommunity ips community suite