PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.
{ "ubuntu_priority": "low" }