WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.