≤ 2013-09-24
CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.