WP Customer Reviews < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection

Proof of Concept

1) Create a new post
2) In the "Bussness Name" field enter the payload: `0;http://smth.me/" HTTP-EQUIV="refresh" a="a)`
3) Save the post and view it. You will see that you are redirected.