Stored XSS in client profile update section

[munjusi]

The client profile update fields -name, address and phone number are susceptible to stored xss which can allow an attacker to access admin cookie and escalate privileges