Input validation vulnerability in IURNY by INDIGITALL – WhatsApp Chat, Web Push Notifications (FREE) 3.2.3

The IURNY by INDIGITALL plugin for WordPress is vulnerable to a type of attack known as Stored Cross-Site Scripting. This attack can be used by people with administrator-level permissions to inject malicious web scripts into pages. This script will run when a user visits the page. This vulnerability is only present in WordPress installations using the IURNY by INDIGITALL plugin versions 3.2.2 or earlier, and will only affect multi-site installations or installations where the security feature ‘unfiltered_html’ has been disabled.