WordPress Easy Contact Form plugin version 1.1.7 suffers from a persistent cross site scripting vulnerability.