CIW Exam 1D0-621 Topic 11 Question 38 Discussion

One of the web design clients contacts you to report that a visitor on their site submitted a form. A malicious web site then opens in a new window and launched malware on the visitor's computer. What is the probable cause of this attack placed on the web form?