Description The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS. References https://wordpress.org/plugins/contact-form-7-sms-addon/#developers