Input validation vulnerability in Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty 3.1.1

The Floating Chat Widget – Chaty plugin for WordPress can be vulnerable to Stored Cross-Site Scripting when used in certain installations. This is a type of attack that could allow someone with administrator-level permissions to insert malicious code into pages. That code would then be executed when other users visit the page. This type of vulnerability only affects multi-site installations and installations where a certain security feature has been disabled.