In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).

By admin