BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.

Published Jan 26, 2022 · Updated Aug 4, 2024 · Assigned by mitre