Stored XSS on new Calling plugin (spreed)

Proof Of Concept : =============== 1. Set `name` as an xss payload like `"x><img src=a onerror=alert(1)>`. {F143238} 2. Invite people to single call room. 3. Xss will execute in IE. (It doesn't support CSP) {F143237}