The ninja-forms plugin prior to 3.0.31 for WordPress has insufficient HTML escaping in the builder.
ninjaforms ninja forms