Cross site scripting

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...