Input validation vulnerability in Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress 1.3.0

The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress has a security flaw that can be exploited by hackers. This flaw, known as Stored Cross-Site Scripting, allows attackers with contributor-level access or higher to insert harmful web scripts into pages. This can happen because the plugin does not properly clean or filter the information provided by users. As a result, these harmful scripts can be executed whenever a user visits the affected page.