Input validation vulnerability in Calculator Builder 1.5.0

The Calculator Builder plugin for WordPress, up to version 1.5.0, is vulnerable to a type of attack called Reflected Cross-Site Scripting. This type of attack happens when an attacker can inject malicious code into a website if they can get a user to click on something. In this case, the malicious code can be injected through a parameter called ‘page’ because it does not have enough protection against it. This means that clicking something that an attacker has set up can activate the malicious code.