Description
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
Remediation
References
https://github.com/igniterealtime/Openfire/compare/cd0a573...5e5d9e5
https://github.com/igniterealtime/Openfire/pull/1441
Related Vulnerabilities
CVE-2022-43441 Vulnerability in maven package org.webjars.npm:sqlite3
CVE-2021-23388 Vulnerability in npm package forms
CVE-2022-22885 Vulnerability in maven package cn.hutool:hutool-http
CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core
CVE-2022-23458 Vulnerability in maven package org.webjars.npm:tui-grid