A web application allows users to update their profile infor…

A web application allows users to update their profile information. The developer uses element.innerHTML = profileData; to display the user’s “Bio” section on the public profile page. Which vulnerability is present, and what is the best strategy to solve it?