jc21.com Nginx Proxy Manager prior to 2.9.17 allows XSS during item deletion.
nginxproxymanager nginx proxy manager