Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
{ "cpes": [ "cpe:2.3:a:livehelperchat:live_helper_chat:*:*:*:*:*:*:*:*" ], "severity": "Medium" }