DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter.Referenceshttps://github.com/wkeyuan/DWSurvey/issues/47