Input validation vulnerability in Ultimate Addons for Contact Form 7 3.1.29

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This means that if you are running a version of the plugin up to and including 3.1.28 and have a multi-site installation or have disabled a certain security measure called unfiltered_html, an attacker with administrator-level permissions and above could inject malicious web scripts into pages. These scripts would then run whenever a user visits the page.