CVE-2014-10386

The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections...