Input validation vulnerability in fitness calculators plugin 2.0.7

The Fitness calculators plugin for WordPress is vulnerable to a type of attack known as Stored Cross-Site Scripting. This type of attack can be done by an user with administrator-level permissions. The attack makes it possible to inject malicious web scripts in pages, which will then execute whenever someone visits the page. This vulnerability only affects multi-site installations and installations where a specific security feature has been disabled. The vulnerability has been present in version 2.0.7 and all versions before that.