In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the template manager component.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16954
https://developer.joomla.org/security-centre/684-20170402-core-xss-vulnerability