ginatrapani/ThinkUp — Issue #1155: XSS: Account Management -> Users
Author: nilsj
Created: 2011-11-15 23:48:58+00:00
State: open

After user registration the fullname of a users is'nt quoted inside the Account Management -> Users tab (admin user). Result is a persistent XSS vulnerability.