## https://sploitus.com/exploit?id=WPEX-ID:EC640D47-BB22-478D-9668-1DAB72F12F8D
1. Ensure Contact Form 7 is installed, along with this plugin
2. Visit Contact > Ultimate Addons, ensure "Database" is checked, and click Save.
3. Visit Contact > Ultimate DB, select a form, and Submit.
4. In the URL, append the following payload, and see the alert upon loading the new page: &s=%3Cimg%20src=x%20onerror=alert(/XSS/)%3E