The Ninja Forms plugin prior to 3.4.28 for WordPress lacks escaping for submissions-table fields.
ninjaforms ninja forms