OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
- https://youtu.be/Xh6LPCiLMa8
No PoCs found on GitHub currently.