- Affected version
- 2.2.1
In
XF\BbCode\Parser::parse, $text can be a object (ie phrase etc) which renders to a string. To avoid re-triggering __toString in a loop, this function should use strval or (string) to ensure the input is actually a string before repeatedly accessing the $text variable