Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.
No related bugs.