≤ 2016-10-25
BlogCMS through 2016-10-25 has XSS via a comment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.