≤ 2.6.0
The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.