WordPress · Calculated Fields Form · CVE-2023-0389
**Name of the Vulnerable Software and Affected Versions**
Calculated Fields Form WordPress plugin versions prior to 1.1.151
**Description**
The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example, in a multisite setup.
**Recommendations**
For versions prior to 1.1.151, update to version 1.1.151 or later to resolve the issue.