Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
daybydaycrm daybyday 2.1.0