I have uploaded below CSV on flexmonster demo. Its executing script. This is cross site script issue. Please take care of this urgently and inform about patch as I have to complete client security testing for our product.
Thank you for reporting.
We will fix this issue in the next minor update 2.319 (ETA Jul 03).
Please let me know if it works for you.
Thanks Ian. I will wait for your release.