CVE-2024-7891

The Floating Contact Button WordPress plugin (versions prior to 2.8 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape certain plugin settings, which allows high-privilege users, such as administrators , to perform XSS attack...