CVE-2020-26135

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.