Stored XSS via user/group name

In getgroups.vm getusersandgroups.vm getusers.vm

Steps to reproduce:

• Add a user or group with apostroph or quote in name (or first/second name)
• LiveTable will show empty list in:

  http://localhost:8080/xwiki/bin/admin/XWiki/XWikiPreferences?editor=globaladmin&section=Users
  http://localhost:8080/xwiki/bin/admin/XWiki/XWikiPreferences?editor=globaladmin&section=Groups
  http://localhost:8080/xwiki/bin/edit/Main/Test?editor=rights
  

Something like "};alert(1);var x={"bla":" would be XSS