Description
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
Remediation
References
https://github.com/igniterealtime/Openfire/compare/cd0a573...5e5d9e5
https://github.com/igniterealtime/Openfire/pull/1441
Related Vulnerabilities
CVE-2015-8854 Vulnerability in maven package org.webjars:marked
CVE-2021-45458 Vulnerability in maven package org.apache.kylin:kylin-core-common
CVE-2014-0073 Vulnerability in npm package cordova-plugin-inappbrowser
CVE-2022-3510 Vulnerability in maven package com.google.protobuf:protobuf-java
CVE-2020-35460 Vulnerability in maven package net.sf.mpxj:mpxj