Development » Algonyx

Description¶

Module/Section: Agency Profile → Edit Primary Contact
Profile: Agency
Issue Category: Functional

On the Edit Primary Contact modal, the Role/Designation input field lacks input validation and sanitization, allowing users to enter HTML or JavaScript tags.
This is a security risk and may cause XSS vulnerabilities or incorrect data storage.

Steps to Reproduce¶

1. Navigate to the Agency Profile page.
2. Open the Add Primary Contact or Edit Primary Contact modal.
3. Enter HTML/JS tags (e.g., <script>alert(1)</script> or <b>test</b>) in the Role/Designation field.
4. Save the changes.

Expected Result¶

The Role/Designation field should sanitize or reject HTML/JavaScript tags and accept only valid text input.

Actual Result¶

The field allows HTML/JS tags to be entered without restriction.

Root Cause¶

To be filled

Impacted Area¶

To be filled

Attachments¶

• PoC

Additional Info¶

• Tested By: Aman