I was asked if the DDE YARA rules I created work with oledump.py on the sample that Xavier wrote about in his diary entry “Dynamic Data Exchange (DDE) is Back in the Wild?”.
Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.