Input validation and XSS vulnerabilities

[ChrisHowd]

Describe the bug
Input validation is weak across the application. Dangerous characters are accepted, email validation is minimal, and no restrictions exist on file uploads. There is a potential for XSS vulnerabilities due to insufficient input sanitization.

To Reproduce

1. Attempt to register or input data with script tags or dangerous characters
2. Try file uploads with potentially unsafe extensions
3. Observe lack of sanitization in the application output

Expected behavior
Input should be strictly validated and sanitized. File uploads should be restricted. Output should be encoded to prevent XSS.

Additional context
Vulnerabilities included for educational demonstration.