Description

With Association’s board role, i can add a new web link. But, when i create a link, in Link name input field can insert an onfocus/autofocus attribute because do not processing for double quote.

Proof of Concept

1. Login by account with Association’s board role
2. Access funtion Web links and create new link
3. Fill all input, at Link name input field, use payload xss" onfocus="alert(document.domain) and save
4. Login by account with Administrator role
5. Access funtion Web links and perform edit Web link
6. XSS payload will be automatically executed