Product
The Calculated Fields Form plugin is vulnerable to DOM-Based Cross-site Scripting (XSS) due to improper neutralization of input during web page generation.