XSS Vulnerability in AAC - Atlassian ID Display Name is not HTML-encoded on user hover

Raised from https://extranet.atlassian.com/jira/browse/INTSYS-23426...