XSS vulnerability in "/coach/roster/" ( create your first class)

How it was found

Hi Security Team ,

Today I found xss vulnerability in "/coach/roster/" ( create your first class)

steps :

• Go to " Manage students "
• click in " create your first class "
• create your first class Title name ===> "><img src=x onerror=prompt(0);>
• click "create class "

Good Fix ,