Input validation vulnerability in Glofox Shortcodes 2.6

The Glofox Shortcodes plugin for WordPress has a security issue that could potentially allow hackers to inject harmful code into a website. This can happen through the use of two shortcodes called ‘glofox’ and ‘glofox_lead_capture’. This vulnerability exists in all versions up to and including 2.6, and it is caused by not properly filtering and escaping user-provided information. This means that attackers who have contributor-level access or higher could insert their own code into a page, which will then run whenever someone visits that page.