profile stored XSS vulnerability

[tcnichol]

Stored XSS: Many of the profile fields (such as first and last name) are
vulnerable to XSS. When visiting the profile page, the script stored in those
fields will execute. e.g https://cpmr.tacc.utexas.edu/profile/viewProfile/
66101cce428a36d45381c305