Eventum Issue Tracking System 2.3.1 storage-type cross-site scripting vulnerability and repair

Eventum Issue Tracking System is a user-friendly and flexible bug Tracking System that helps the development team quickly organize tasks and bugs. Eventum Issue Tracking System 2.3.1 The storage-type cross-site scripting vulnerability may cause XSS attacks to users.

[+] Info:
~~~~~~~~~
# Exploit Title: Eventum 2.3.1 stored XSS
# Date: 19-2-2011
# Author: Saif El-Sherei
# Software Link: https://code.launchpad.net/eventum
# Version: Eventum 2.3.1
# Tested on: FF 3.0.15, IE 8
# Vendor notification: vendor notified, awaiting response

[+] Poc:
~~~~~~~~~
Details:
The "Full-Name" variable is not properly sanitized before displayed in any page. where an authorized user can perform this attack on other users who has access to the system, by changing his own "full-name" in the preferences section.
 
POC:
<Script> alert (w00t); </script>

[+] Reference:
~~~~~~~~~
Http://www.exploit-db.com/exploits/16196

Fix: Filter