admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.Referenceshttps://github.com/omeka/Omeka/commit/ba841892116544847d76d3838781c9708cb92221https://github.com/omeka/Omeka/releases/tag/v2.6.1