CONF-16888 has introduced or re-introduced an XSS vulnerability.

To reproduce:

• Create a new user, and for the Full Name use:

  <script>alert('Vulnerable')</script>

• Go to ../admin/indexbrowser.jsp and find the entry
• Click on the entry, and the script is executed.

This also happens for other content types.