Cockpit 0.5.5 has XSS via a collection, form, or region.
- https://github.com/nikhil1232/Cockpit-CMS-XSS-POC