An XSS issue exists in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.
i-doit i-doit 1.12