HTML injection vulnerability in WordPress CformsII plugin. https://blog.nintechnet.com/html-injection-vulnerability-in-wordpress-cformsii-plugin/