Koala Framework before 2011-11-21 has XSS via the request_uri parameter.
- http://www.cloudscan.me/2011/12/cve-2011-5018-koala-framework-xss.html
No PoCs found on GitHub currently.