WebsiteBaker CMS allows for injection of HTML and javascript.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46135/websitebaker.txt
Source: https://packetstormsecurity.com/files/46135/websitebaker.txt.html