The Request a Quote WordPress plugin had a security issue before version 2.3.4. It did not properly protect some of the information entered when adding or editing a quote as an admin. This could allow malicious code to be stored with the quote and be put on display in the “”All Quotes”” table