Vendor
The Bit Integrations plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) via improper input sanitization in the notification_content parameter, allowing script injection when specific BuddyBoss notification flows are active.