Hi Rose,

Kindly find my response for your inquiries below:

1. Can I use TyniMCE in user post and conversation.
2. How can I disable Dangerous characters script,applet,iframe,‘,+,*,?,-,%,:,“,\,<,],[,>,;,(,)

-> Unfortunately, there is no setting to change the editor of user post and conversation. and disable the characters currently.

Hi

Without input data filtering the site is vulnerable to the Message Attack . With Cross-Site Scripting Session An attacker could use this vulnerability to steal session (s) and other actions by using Hijacking JavaScript to inject malicious stored XSS code.

The site is hacked twice this week
and we need your help

Thanks and BR
UDI ERTINET

I am not sure if I understand you here. Where are you posting these codes?