The frp_form_answers (aka Forms Export) extension prior to 3.1.2, and 4.x prior to 4.0.2, for TYPO3 allows XSS via saved emails.
frappant forms export