An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.