Cross site scripting

Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field...