TI-2023-05914 CVE-2023-6446 · GHSA-x4h7-rf56-3v6wCalculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site ScriptingPriority LOW 22The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00301 · Published 2024-01-11 · No fix listed CWE-87