Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
daybydaycrm daybyday 2.1.0