threatpost.com
WordPress WP Live Chat Support Plugin Issues Second Patch in Month
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites.