Description
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
Remediation
References
https://cybersecurityworks.com/zerodays/cve-2019-20363-openfire.html
https://github.com/igniterealtime/Openfire/pull/1561
https://issues.igniterealtime.org/browse/OF-1955
Related Vulnerabilities
CVE-2024-36401 Vulnerability in maven package org.geoserver:gs-wms
CVE-2020-5259 Vulnerability in npm package dojox
CVE-2023-30525 Vulnerability in maven package org.jenkins-ci.plugins:reportportal
CVE-2020-28281 Vulnerability in npm package set-object-value
CVE-2023-24057 Vulnerability in maven package ca.uhn.hapi.fhir:org.hl7.fhir.r5