Stored XSS in dashboard By "Test Run Assignee & Executed by" in "Test Runs List Gadget"

Steps:

1. Go to Your Profile and in Profile Name filed inject XSS Payload: "><img src=x onerror=alert('Assigner')>
2. Install Xray Test Management for Jira Server, Then go to Dashboard tab. and create new Dashboard.
3. After create dashboard click in "add gadget" button.
4. From gadget list Select Test Runs List.
5. Now if victim filling Test Run Assignee OR Executed by fields. the payload will be reflected in the page.