Stored XSS in AuditLogs by User Name field value

Steps:

1. The attacker accesses his account and changes its name to an XSS payload
2. The attacker go to any issue, and from the "Xporter" section he exports the issue.
3. Now any Admin/Users go to AuditLogs_ the XSS Payload is reflected in the victim's browser