CVE-2024-9207

The BuddyPress Docs plugin for WordPress contains a security flaw where URLs are not properly sanitized, allowing malicious actors to embed executable code within legitimate links. This vulnerability affects all versions up to and including 2.2.3, enabling unauthenticated attackers to inject arbitrary scripts that can be executed if a user clicks on the link.

Based on public CVE data (MITRE/NVD).