Language: JavaScript
Label: safe
CWE: CWE-829 \u2014 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Code:
function sumInputs(input) {
    var sum = 0;

    $(input).each(function(){
        sum +=  $(this).val() === "" ? 0 : parseFloat( $(this).val() );
    });

    return sum;
}