[Security Test] {XSS} In employee self serve mode, Change Password page shows server error when any script is provided as input to Secret Question's answer field.

[Security Test] In employee self serve mode, Change Password page shows server error when any script is provided as input to Secret Question's answer field.

Test Environment:
1. Login as Employee and traverse employee self serve mode
2. Goto Change Password Page
3. Enter following scripts in Answers of Security questions.

Scripts used for testing are:
<script>alert("Attacked")</script>
"><script>alert("xss");</script>
"><script>">'><script>alert(String.fromcharcode(88,83,83))</script>
"><img src=x onerror=alert("XSS");</script>

Malicious user can enter any scripts through application to generate Server Errors.