BuddyPress < 6.4.0 - Lack of Capability Check on Profile Page
Description
The 6.4.0 release addresses one security issue: non-capable users could add a style attributes to "span" and "p" elements in possible rich text fields of their profile page. The vulnerability has been fixed.
Affects Plugins
Fixed in version 6.4.0✓
Classification
Miscellaneous
Verified
No
Timeline
Publicly Published
2020-11-28 (about 7 months ago)
Added
2020-11-28 (about 7 months ago)
Last Updated
2021-01-19 (about 6 months ago)