Input validation vulnerability in Flo Forms – Easy Drag & Drop Form Builder 1.0.43

The Flo Forms plugin for WordPress has a security vulnerability where malicious code can be uploaded through SVG files. This can happen because the plugin allows these file uploads without properly checking the content. This means that someone without authorization could upload a file containing harmful code, which could then be executed by an administrator who views it in the WordPress admin interface. This could potentially lead to the entire website being compromised.