≤ 4.0.38
Jeedom through 4.0.38 allows XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.