The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.

Twonky Server before 8.5.1 has XSS via a modified “language” parameter in the Language section.

Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselect_main.php because code within the database is accessible to uploads/dede/sys_cache_up.php.

sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker’s control.

Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter.