CVE-2020-35705

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.