Input validation vulnerability in Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App 6.4.6.1

A plugin called The Community by PeepSo, which is used for social networking, membership, registration, user profiles, and a mobile app on WordPress, has a security issue. This vulnerability is caused by not properly filtering and protecting against malicious code in URLs that are used in posts, comments, and profiles. This means that someone with at least Subscriber-level access can insert harmful scripts into pages that will run whenever a user views that page.