Input validation vulnerability in Contact form Form For All – Easy to use, fast, 37 languages. 1.2

The Contact Form For All plugin for WordPress, up to version 1.2, has a vulnerability which can allow attackers with contributor-level or higher permissions to insert malicious web scripts into pages. These scripts can then be executed when the page is accessed by users, without their knowledge. This vulnerability occurs because the plugin doesn’t properly check and protect user-supplied information.