studio/builder_menu.php?page=sets in UNA 10.0.0-RC1 allows XSS via the System Name field under Sets during set editing.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14805.json"