Product
The Slim Jetpack WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) via the website contact-field parameter, enabling attackers to inject arbitrary web scripts through the [contact-form] shortcode.