It allows : / . < > and " though which is enough to allow XSS.

Strangely, though, they don't allow lower case letters.

And yes, you can register a company named > LIMITED and someone has https://find-and-update.company-information.service.gov.uk/c...