Special:Ask in Semantic MediaWiki prior to 4.0.2 allows Reflected XSS.
semantic-mediawiki semantic mediawiki