BuddyPress.org

There seem so be several XSS issues still to solve. I just opened a test account and posted a widely accessible XSS string for testing purposes, which even affected the front page.

http://testbp.org/groups

I deleted my account to remove the content but forgot to delete my account. Therefore the XSS test group is still there:

http://testbp.org/groups/alert0alert1alert2alert3-alert4alert6function-xss

I hope you are intending to increase the security of buddypress.

Cheers