Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.
CWE-79, CWE-79