Input validation vulnerability in Contact Form Generator : Creative form builder for WordPress 2.5.5

The Contact Form Generator plugin for WordPress is vulnerable to a security issue known as Cross-Site Scripting. This means that an unauthenticated attacker may be able to inject malicious code into webpages. This code can be executed if the user clicks on a link or performs some other action. The vulnerability affects all versions of the Contact Form Generator plugin up to version 2.5.5 due to a lack of input sanitization and output escaping.