Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field.Referenceshttps://www.exploit-db.com/exploits/50788https://github.com/andreapollastri/cipi/releases