Unrated
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
CVE-2020-35199
First seen on SecPulse
References
- report exploit-db.com