Udemy: xss profile

some fields in the profile are vulnerable for static cross site scriptings. see attachments...