TI-2013-04324 CVE-2013-4944 · GHSA-w2v5-r8g7-67hvCross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request…Priority LOW 17Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary we…CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02072 · Published 2013-07-29 · No fix listed CWE-79