Input validation vulnerability in wpForo Forum 2.4.5

A popular plugin called wpForo Forum for WordPress has a security issue that could allow hackers to inject harmful code into web pages. This affects all versions up to and including 2.4.5. The problem is caused by the plugin not properly filtering and protecting input from users. This means that attackers with a certain level of access could insert their own code into pages, which could then be executed whenever someone opens a certain type of file called SVG.