An CRSF-to-stored-XSS security bug plagues 50,000 ‘Contact Form 7’ Style users.
Source: Threadpost