Input validation vulnerability in Contact Us Page – Contact People 3.7.4

The Contact Us Page plugin for WordPress has a security issue that could allow hackers to inject harmful code into web pages. This can be done by exploiting a vulnerability in the ‘style’ parameter. This vulnerability affects all versions up to and including 3.7.4 and is caused by inadequate protection of user input and output. As a result, attackers with Contributor-level access or higher can insert their own code into pages, which will then be executed whenever someone visits that page.