WordPress has plenty of functions to sanitize, the one who made the theme or dropped in the form probably overlooked it.
286 karma · joined August 10, 2011
noeltock.com
Thanks for the laugh, nailed it.
I'll try to get a post together in the next few days summarizing our latest iteration and lessons learned.
Cheers, Noel