Tested version: latest Steps to reproduce the vulnerability: - Login in the application. - Click on Add a Private task. - Set `"<script>alert(document.domain)</script>` as task description and save. - XSS will fire whenever task is reflected in page. 