Input validation vulnerability in Community by PeepSo – Social Network, Membership, Registration, User Profiles 6.2.6.0

The Community by PeepSo plugin for WordPress is vulnerable to an attack known as Reflected Cross-Site Scripting. This type of attack is possible when a user clicks on a link that has been created with malicious code. The vulnerability exists in all versions up to 6.2.6.0 and can be exploited because of the plugin’s insufficient input sanitization and output escaping. This means that unauthenticated attackers can inject arbitrary web scripts into pages that will be executed if a user clicks on the malicious link.