≤ 3.2.3
The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.