Sounds like an old case of the unmoderated user input.

I've actually seen this kind of thing on a company page beforehand. There's really no excuse in that environment.

the page takes user input & displays it in the background for the next visitor.