Input validation vulnerability in WP Flow Plus 5.2.2

The WP Flow Plus plugin for WordPress has a security flaw that allows attackers to inject harmful code into pages using a specific shortcode. This can happen in all versions of the plugin, including version 5.2.2, because the plugin does not properly clean and protect user input. This means that attackers who have contributor-level access or higher can insert their own code into pages, which will then run when a user visits that page.