Input validation vulnerability in OneClick Chat to Order 1.0.4.2

The OneClick Chat to Order plugin for WordPress is vulnerable to a cyber attack known as Cross-Site Scripting. This attack is possible when the plugin is used in multi-site installations or installations where an extra security feature has been disabled. It allows someone with administrator-level permissions to inject harmful code into pages which will be executed whenever a user visits that page. This affects all versions of the plugin up to, and including, version 1.0.4.2 due to insufficient security measures.