Joomla JomSocial component version 4.7.6 suffers from a persistent cross site scripting vulnerability.