CVE-2016-1222 (php-contact-form)

Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.

Source: CVE-2016-1222 (php-contact-form)