The label field (Form name) was vulnerable to stored Cross-Site Scripting issue.
When creating or editing a form, use the following payload as a Form name (label field): "><script>alert(1)</script><!--', which will be executed when viewing the "Show All Forms" section, as well as when opening the Contact Details of a user having submitted to the affected form.
2021-02-08 (about 2 years ago)
2021-02-08 (about 2 years ago)
2021-02-09 (about 2 years ago)