CVE-2013-4944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendshiprequestmessage parameter to...