Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel such as Telegram WhatsApp Viber Skype Facebook Vkontakte or Odnoklassniki. This is mishandled within the administration panel for conversations/all conversations/inbox conversations/unassigned and conversations/closed.