Cross-Site Scripting (XSS) in "/api/part_categories"

[tuando243]

Bug description

A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/part_categories.

Steps to reproduce

1. Login as admin.
2. Click on 'Add Category'.
3. Insert XSS payload (<img src=1 onerror=alert('xss')>) in the "Name" field and click on Save.