The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar.
it-economics techradar 1.1