[Plugin: Contact Form] breaking website

this plugin is looking simple and good, but it s taking the site down as it tried to inject url like : http://www.packages-seo.co in the top of the code

http://ww.wp.xz.cn/extend/plugins/contactform/