ProjectPier 0.8.8 has stored XSS
- http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html
No PoCs found on GitHub currently.