Input validation vulnerability in Contact Us all-in-one button 1.8.8

The All in One Support Button + Callback Request plugin for WordPress has a security vulnerability that could allow attackers to inject malicious code into pages. This code can be executed when a user visits the page, potentially giving attackers access to user information or allowing them to cause other damage. This vulnerability affects versions up to and including 1.8.7 of the plugin, as the plugin does not properly sanitize user input or properly escape output.