Input validation vulnerability in FunnelKit Funnel Builder Pro 3.4.5

The FunnelKit Funnel Builder Pro plugin for WordPress has a security vulnerability that allows attackers to inject harmful code into posts. This can be done by using a function called ‘allow_iframe_tag_in_post’ which enables script and iframe tags to be used in all versions of the plugin, up to version 3.4.5. This means that if an attacker has contributor access or higher, they can insert code into pages that will run when someone visits that page.