Development » Algonyx

Description¶

Module/Section: Agency Profile → Project
Profile: Agency
Issue Category: Functional

The Add Project input fields (Project Title, Project Overview, Category) on the Agency Profile page do not sanitize user input, allowing HTML and JavaScript tags.
This creates a potential security risk and may affect data integrity.

Steps to Reproduce¶

1. Navigate to the Agency Profile page.
2. Open Projects → Add Project.
3. Enter HTML/JS tags (e.g., <b>test</b> or <script>alert(1)</script>) in Project Title, Project Overview, or Category.
4. Save the project.

Expected Result¶

The Project input fields should sanitize or reject HTML/JavaScript tags and accept only safe text input.

Actual Result¶

The fields accept HTML/JavaScript tags without validation, creating a security vulnerability.

Attachments¶

• PoC

Impact Area:¶

Root Cause:¶

Additional Info¶

• Tested By: Aman