ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
"https://github.com/pypa/advisory-database/blob/main/vulns/ajenti/PYSEC-2018-107.yaml"