WHSmith contact form spams out personal customer data

Users of UK newsagent chain WHSmith's online services have reported large amounts of email arriving in their inboxes, containing personal contact data on other users.
from Naked Security http://ift.tt/1L4kCLX