Craft CMS through 4.4.9 is vulnerable to HTML Injection.
- https://medium.com/@mondalsomnath9135/html-injection-in-craft-cms-application-e2b28f746212
No PoCs found on GitHub currently.