WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.Referenceshttps://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16http://www.securityfocus.com/bid/96758https://www.qbittorrent.org/news.php