Stored XSS via Xporter configuration properties

Xporter must be prepared to lead with XSS Atack.

Cross-site scripting attacks occur when you manage to sneak a script (usually javascript) onto someone else's website, where it can run maliciously.
XSS is possible when you have user input into a web site. For instance, if I was filling out a web form, and it asked me for templates description, I could enter:

Template Description: "<svg/onload=alert(1)>"