The Sticky Chat Widget is a plugin used with WordPress websites, which allows users to add WhatsApp, Messenger, Click to chat, SMS, Email, Messages, Call Button, Contact form and more Chat buttons to their website. Unfortunately, all versions up to and including 1.1.8 of this plugin are vulnerable to a type of attack called Stored Cross-Site Scripting. This attack can occur if an attacker with administrator-level permissions has access to an infected website. This attack allows them to inject malicious web scripts into pages, which can be executed when a user accesses an infected page. This only applies to multi-site installations and installations where a feature called ‘unfiltered_html’ has been disabled.