Input validation vulnerability in 123.chat – 1:1 Live Video Chat Tool Plugin 1.3.0

The 123.chat plugin for WordPress is vulnerable to a type of security issue known as Stored Cross-Site Scripting. This type of security issue can allow attackers with administrator-level permissions to insert malicious code into web pages. This code will execute when a user accesses the page, and can cause harm to the user and the website. This security issue only affects WordPress websites that have multi-site installations enabled and websites where unfiltered_html has been disabled. It affects all versions of the 123.chat plugin up to and including version 1.3.0.