Threats tagged 'ghsa-w7h6-mc97-392g'

A Cross-site Scripting (XSS) vulnerability exists in the Calculated Fields Form plugin up to version 5.5.2.8. This vulnerability allows improper neutralization of input during web page generation, leading to DOM-based XSS. The flaw could allow an attacker to execute arbitrary scripts in the context of the affected web application.