Create New user page XSS

[MorphyKutay]

Describe the bug

not filtering the xss payload written to the username

https://owasp.org/www-community/attacks/xss/

To Reproduce

Steps to reproduce the behavior: 1-) Click on accounts from Dashboard and create new account

2-) Enter the xss payload for the username and fill in the other fields

3-) When you click the save button, you will see an alert.

Screenshots

Additional context

POC : https://www.youtube.com/watch?v=iTX0nbD9YgQ

[Rotzbua]

Confirmed. Seems the Username Regex is not used to verify.