The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.Referenceshttps://wordpress.org/plugins/ninja-forms/#developers
