BuddyPress was updated to version 2.2.3, from version 2.2.2.1. Changelog:

• Fixes several instances where URLs were not made safe (escaped) for output to the browser