Description The contact-form-plugin plugin before 3.3.5 for WordPress has XSS. References https://wordpress.org/plugins/contact-form-plugin/#developers