The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress can be vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can happen when an attacker with administrator-level permissions has the ability to inject web scripts into the pages of a WordPress website. This vulnerability only affects multi-site installations and installations where unfiltered_html has been disabled. The vulnerability can be prevented by making sure all versions of the Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress are up to date.