Affects Version/s: 7.0.0 Beta 2
Fix Version/s: 7.0.0 Beta 4
Steps to reproduce:
- Navigate to Account Settings
- Change First, Middle, and Last Name to "<script>alert(123)</script>"
- Navigate to Sites > Content > Form
#Add new form
#Go to "descriptive", "Icon" View
UserName should show as <script>alert(123)</script>
UserName escape wrong.