Recently there were multiple claims that a persistent cross-site scripting (XSS) vulnerability was fixed in the plugin Contact Form CFDB7, but there was a lack of details provided needed to confirm that. Also, the version that was supposed to resolve that doesn’t make the change you would expect to resolve it.

…

[Read more]