Contact Form to DB by BestWebSoft – Messages Database Plugin for WordPress (<= 1.7.5)

The Contact Form to DB WordPress plugin (<= 1.7.5) is vulnerable to unauthenticated Stored Cross-Site Scripting via the cntctfrm_contact_dropdown parameter, allowing attackers to execute scripts in an administrator's browser session.