Launchpad.net

CVE 2010-4245

pootle 2.0.5 has XSS via 'match_names' parameter

See the CVE page on Mitre.org for more details.