A Cross-Site Scripting (XSS) vulnerability exists in Brainstorm Force SureForms through version 2.12.9 due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code into web pages. The vulnerability has a CVSS score of 5.3, indicating medium severity, and does not require user interaction or privileges to exploit.