EIP-2026-113992

This is a security advisory detailing a persistent Cross-Site Scripting (XSS) vulnerability in the Quick Contact Form WordPress plugin version 6.0. The vulnerability arises from insufficient input validation and output sanitization of the 'qcfname4' parameter, allowing attackers to inject malicious scripts.