RelateIQ: HTML injection in "Invite Collaborators"

I was able to edit the contents of the "Invite Collaborators" mail, by using HTML code as my first name. By exploiting this vulnerability, an attacker could send an email with custom text/html code from [email protected] from the RelateIQ server to any recipient. This can be used for phishing...