crm: Още html injections