Input validation vulnerability in Contact Form Email 1.1.48

The Contact Form Email plugin for WordPress is vulnerable to a type of cyber attack called Reflected Cross-Site Scripting. This security issue affects versions of the plugin before 1.1.48. It is caused by a lack of protection that would prevent malicious code from being input and output. This means that unauthorised attackers can insert malicious scripts into webpages, which can be triggered if the user takes a certain action, such as clicking a link.