Description
Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.
Remediation
References
https://discourse.igniterealtime.org/t/openfire-4-6-0-has-reflective-xss-vulnerabilities/89296
Related Vulnerabilities
CVE-2017-16116 Vulnerability in npm package string
CVE-2023-23925 Vulnerability in npm package switcher-client
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-debug-jdk15on
CVE-2023-47112 Vulnerability in maven package org.rundeck:rundeck
CVE-2023-26111 Vulnerability in npm package @nubosoftware/node-static