The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
{ "urgency": "not yet assigned" }