Description The contact-form-plugin plugin before 3.96 for WordPress has XSS. References https://wordpress.org/plugins/contact-form-plugin/#developers