Gophish through 0.8.0 allows XSS via a username.Referenceshttps://github.com/gophish/gophish/pull/1547