Reflected Cross-Site Scripting (XSS) vulnerability discovered by iohex and WPScanTeam in WordPress W3SCloud Contact Form 7 to Zoho CRM plugin (versions <= 1.1.0).
Update the WordPress W3SCloud Contact Form 7 to Zoho CRM plugin to the latest available version (at least 2.1.0).