tianti 2.3 has stored XSS in the article management module via an article title.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/DenOMeN5BR0/detail.php