The wp-live-chat-support plugin prior to 8.0.27 for WordPress has XSS via the GDPR page.
3cx live chat