HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
Published November 25, 2020.
Hrsale Hrsale