GitBook through 2.6.9 allows XSS via a local .md file
By entering script in MD file, it can be executed by gitbook
GitBook 2.6.9