Input validation vulnerability in Sticky Buttons – floating buttons builder 3.1.0

The Sticky Buttons plugin for WordPress has a security vulnerability that could allow an unauthenticated user (someone who is not logged in) to inject malicious web scripts into web pages. This vulnerability affects versions up to, and including, 3.1.0 because the plugin does not properly sanitize input and escape output. To exploit this vulnerability, an attacker could create a link or button that once clicked could lead to malicious web scripts being executed on the user’s device.