BuddyBoss Platform up to and including 1.8.0 allows XSS via the Group Name or Group Description field.
buddyboss buddyboss