XSS vulnerability at create tag function.

[KevinKien]

XSS vulnerability at the "Lead" function. When i create a tag with payload "2"><img src=x onerror=alert(String.fromCharCode(88,83,83));>" example like image bellow:

After i click create new tag, pop up will show such as image bellow.

Any one when access to url https://demo.krayincrm.com/krayin-42-112-15-238/admin/leads/view/8, pop up will show cho this user.

Recommended: You should validate input for tag, don't allow insert special characters or html encode special characters.

[suraj-webkul]

Hello, @KevinKien,

Thank you for addressing this issue. We appreciate the fix provided in PR #1675 and your prompt response.