Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS
The  does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.