Product
An unauthenticated stored DOM-based cross-site scripting vulnerability in the HT Contact Form plugin for WordPress allows attackers to execute arbitrary scripts via crafted draft resume URLs.