Input validation vulnerability in VS Contact Form 11.5

. The VS Contact Form plugin for WordPress may have a security flaw in versions up to 11.5. This flaw could allow an attacker to inject malicious code into web pages. This code can then be executed if the attacker can trick someone into clicking a link. The vulnerability only affects people using older browsers, as newer browsers automatically encode the REQUEST_URI parameter.