Stored XSS

How it was found

Hello,

I have found XSS on https://sandbox.veris.in/portal/members/

Steps to reproduce:

1. Sign in your Veris account.
2. Go to Member Book -> Add new member.
3. Fill this payload <svg onload=alert(1)> in "Name" and "Description" field.
4. Now visit https://sandbox.veris.in/portal/members/ or go to groups->Add member from member book
5. Tadaa! XSS Triggers

Proof of Concept: Please find it attached.

Do evaluate it and inform me accordingly.

Best Regards,

Hely H. Shah