Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.