The wp-live-chat-support plugin prior to 4.1.0 for WordPress has JavaScript injections.
3cx live chat