Security issue

Hello,

I have Wordfence plugin installed in my website and in the recent scan there was a critical issue with this plugin. Here is a link to this issue: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/cartflows/woocommerce-checkout-funnel-builder-by-cartflows-create-high-converting-stores-for-woocommerce-207-authenticated-contributor-stored-cross-site-scripting

And here is the issue: “The WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_upload_mimes’ function in versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.”

Can you do something to remove this security vulnerability?

Thank you so much for help!