Description
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
Remediation
References
https://github.com/igniterealtime/Openfire/pull/1561
https://issues.igniterealtime.org/browse/OF-1955
https://cybersecurityworks.com/zerodays/cve-2019-20363-openfire.html
Related Vulnerabilities
CVE-2016-10608 Vulnerability in npm package robot-js
CVE-2021-39235 Vulnerability in maven package org.apache.ozone:ozone-main
CVE-2017-16153 Vulnerability in npm package gaoxuyan
CVE-2022-0084 Vulnerability in maven package org.jboss.xnio:xnio-api
CVE-2019-7722 Vulnerability in maven package net.sourceforge.pmd:pmd-core