User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.
solarwinds orion platform
solarwinds orion platform 2020.2.6