CVE-2018-10810: Improper Neutralization of Input During Web Page Generation

chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header...