Getting XSS issue in Contact us page, User communication and in ToDo Commment Box

[naresh_dingankar]

I’m encountering an XSS issue

1. on the “Contact Us” page. When we enter an XSS URL in the message/comment box, it accepts the URL and displays a “Thank you for your message” response.

2. I’m also encountering an XSS issue in the “User > Activity > Communication” section. When we enter an XSS URL in the message box, it accepts the URL, even though it typically should not.

3. In “User>>ToDo>>Description” it also accepts the xss url.

You can refer the attachments…