October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.
- https://www.exploit-db.com/exploits/44144/
No PoCs found on GitHub currently.