Description
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
Remediation
References
https://www.exploit-db.com/exploits/49233
Related Vulnerabilities
CVE-2020-28278 Vulnerability in npm package shvl
CVE-2021-23771 Vulnerability in npm package argencoders-notevil
CVE-2023-24057 Vulnerability in maven package ca.uhn.hapi.fhir:org.hl7.fhir.r5
CVE-2022-22138 Vulnerability in npm package fast-string-search
CVE-2020-13934 Vulnerability in maven package org.apache.tomcat:tomcat-coyote