XSS Protection for Contact Form 7 — a practical guide to Contact Form 7 XSS with clear examples you can reuse in real projects.
Contact Form 7 Tutorial Series (94/100). Prefer one article? Read the complete Contact Form 7 tutorial.
Short description
Be careful with HTML emails and PDF HTML templates — escape field values.
XSS tip
esc_html / esc_attr on output
wp_kses for limited HTML
Don’t trust mail body placeholders unescaped in custom UIs