Input validation vulnerability in Call / Contact Button 4.7.9.1

The Button contact VR plugin for WordPress has a security issue that can put websites at risk. This problem, known as Stored Cross-Site Scripting, can happen in versions 4.7.9.1 and below. It occurs because the plugin does not properly clean up or protect against harmful code. As a result, attackers who have special permissions can add their own code to a page. When someone visits that page, the code will run and potentially cause harm. This problem only affects certain types of WordPress installations.