Concrete CMS: Stored XSS in Feature tile

XSS payload can be executed and saved permanently in Feature tile . Poc code: "...