[Security] Stored XSS in user fields

[edoardottt]

Tested version: latest

Steps to reproduce the vulnerability:

• Login in the application.
• Click on Direct messages.
• Click on Add a new user.
• Fill all the possible fields with payload "<script>alert(document.domain)</script> and save.
• XSS will fire whenever user info is reflected in page.