{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/calculated-fields-form/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:codepeople:calculated_fields_form:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-124253"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Calculated Fields Form"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["codepeople"],"content_html":"\u003cp\u003eThe Calculated Fields Form plugin for WordPress, developed by codepeople, is affected by a DOM-based cross-site scripting (XSS) vulnerability, identified as CVE-2026-124253. This issue occurs due to improper neutralization of input during web page generation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows for DOM-Based XSS within the affected plugin versions ranging from n/a through 5.5.2.8.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers of the Calculated Fields Form plugin should monitor the vendor for updates addressing this vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-11T16:07:19Z","date_published":"2026-11-11T16:07:19Z","id":"https://feed.craftedsignal.io/briefs/2026-11-calculated-fields-form-xss-cve-2026-124253/","summary":"The Calculated Fields Form plugin is vulnerable to DOM-Based Cross-site Scripting (XSS) due to improper neutralization of input during web page generation.","title":"Calculated Fields Form: DOM-based cross-site scripting (CVE-2026-124253)","url":"https://feed.craftedsignal.io/briefs/2026-11-calculated-fields-form-xss-cve-2026-124253/"}],"language":"en","title":"CraftedSignal Threat Feed - Calculated Fields Form","version":"https://jsonfeed.org/version/1.1"}