1. Create/edit a team and add a member to it
2. Fill all the forms, upload a photo and input `" onmouseover='alert(1)'` in the "First name ", "Lastname" or "Link URL" field.
3. Put the resulting shortcode in a post, render the post and hover the user card / social link icon to trigger the XSS