CVE-2020-13897

HESK before 3.1.10 allows reflected XSS.