XSS in main page

How it was found

If a project name is saved with a XSS string such as: “><svg onload="prompt(/xss/);"><!--

and a translator visits it, it'll result in the xss executing in the main page, due to the fact that it shows your recent visits.

Screen: http://prntscr.com/3awwuv