Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS by updating a script's Script Name Suite Name Base URL Android iOS Scripts Run Origin Machine or Comment field. The sql parameter can be used to trigger reflected XSS.