Wordpress BuddyPress plugin <= 12.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Activity Reactions For Buddypress versions = 12.5.0...