WordPress Contact Form DB 2.8.26 Cross Site Scripting

WordPress Contact Form DB plugin version 2.8.26 suffers from a cross site scripting vulnerability.