Input validation vulnerability in Ultimate Addons for Contact Form 7 3.1.29

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to a type of attack that could allow unauthenticated attackers to inject arbitrary web scripts into a page. This is possible because the plugin does not properly sanitize or escape certain data before displaying it. If the attacker can trick a user into clicking a malicious link, the script will be executed. Versions up to and including 3.1.28 are affected.