Description
Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.
Remediation
References
https://www.exploit-db.com/exploits/49235
Related Vulnerabilities
CVE-2022-43431 Vulnerability in maven package com.compuware.jenkins:compuware-strobe-measurement
CVE-2023-46234 Vulnerability in npm package browserify-sign
CVE-2022-24819 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2021-39177 Vulnerability in maven package org.geysermc:connector
CVE-2022-23621 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore