Input validation vulnerability in Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty 3.0.9

The Chaty plugin for WordPress is vulnerable to an attack where malicious script code can be stored and used to harm users when they visit a page. This only affects WordPress installations which are running multi-site or where a certain security feature has been disabled. Versions of Chaty up to and including 3.0.9 are affected due to inadequate security measures. Administrators with the highest level of permissions are the only ones who can exploit this vulnerability.