Automattic: Site information's Display Name section vulnerable for XSS attacks and HTML Injections.

Summary: Hi, Greetings. I have found that site information's Display Name section on the try.pressable.com is vulnerable for potential XSS attacks and HTML Injections. Steps To Reproduce: Visit https://try.pressable.com Create a new site. On the Display Name section, put the XSS / HTML Injection payloads. XSS will be triggered/ Injected HTML will be reflected. XSS Payload: "> HTML Payload: First name: Last name: Supporting Material/References: POC Video attached Impact Due to these vulnerabilities, attacker can easily divert victims to their malicious site and able to get credentials of...