EIP-2026-114220

This is a working proof-of-concept for a stored XSS vulnerability in the WP Live Chat Support WordPress Plugin. The exploit demonstrates how an unauthenticated attacker can inject malicious JavaScript payloads via the 'name' and 'msg' parameters in a POST request, which are then stored and executed when viewed by an admin.