Input validation vulnerability in Float to Top Button 2.3.6

The Float to Top Button is a plugin for WordPress website owners that allows visitors to easily return to the top of the page. However, versions of the plugin before 2.3.6 did not properly protect against malicious attacks, allowing someone with administrative access to inject their own web scripts. This could be used to execute malicious code on visitors’ computers when they view the page. This vulnerability only affects websites that use multiple sites or have disabled the ability to view HTML.