BuddyPress.org

alert(XSS Found)</script>”>
<svg><script>/<1/>alert(document.domain)</script></svg>

ed

@garrett-eclipse @robkk @djsteveb thank you all for the report and djsteveb for going the extra mile to let other affected websites know about this. I am closing and “hiding” this topic per consensus of BP core team so that they won’t get link juice from our site. Thank you all. cc @henrywright

Then you’ll want to 😉 Please read the codex guides we wrote them to help explain these sorts of requirements.

Have a read and pop back if further questions arise after reading the guides.

I am not using a buddypress template.

Take a look at the BuddyPress Template Hierarchy article. If your theme uses BuddyPress templates then you’ll be able to override them.

Hi @garrett-eclipse,

Thanks for highlighting this. I’ve passed on your feedback to the core team.

@jrunfitpro What do you mean by “removing bbPress”? Deactivating/deleting bbPress from Plugins page doesn’t cause any issue per check in my local installation. WP/BP/bbPress versions?

‘published’

I should be able to publish it and did ???

I’ll have a look and see if it is in draft status.