Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header.Referenceshttps://www.directum.ru/https://github.com/awillix/research/blob/main/cve/CVE-2021-31794.md