diff --git src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php
index f371873..8c90356 100644
--- src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php
+++ src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php
@@ -14,12 +14,12 @@
 do_action( 'bp_before_group_header' ); ?>
 
 <div id="cover-image-container">
-	<a id="header-cover-image" href="<?php bp_group_permalink(); ?>"></a>
+	<a id="header-cover-image" href="<?php echo esc_url( bp_get_group_permalink() ); ?>"></a>
 
 	<div id="item-header-cover-image">
 		<?php if ( ! bp_disable_group_avatar_uploads() ) : ?>
 			<div id="item-header-avatar">
-				<a href="<?php bp_group_permalink(); ?>" title="<?php bp_group_name(); ?>">
+				<a href="<?php echo esc_url( bp_get_group_permalink() ); ?>" title="<?php echo esc_attr( bp_get_group_name() ); ?>">
 
 					<?php bp_group_avatar(); ?>