Input validation vulnerability in Community by PeepSo – Social Network, Membership, Registration, User Profiles 6.3.1.1

The PeepSo plugin for WordPress, called “The Community,” has a security issue called Reflected Cross-Site Scripting. This is because it uses a function called add_query_arg without properly protecting the URL. This vulnerability exists in all versions of the plugin up to and including version 6.3.1.1. This means that someone who is not logged in could potentially insert harmful code onto a webpage if they can trick a user into clicking on a link.