Description The contact-form-plugin plugin before 3.52 for WordPress has XSS. References https://wordpress.org/plugins/contact-form-plugin/#developers