Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

Source