Unrated
Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.
CVE-2020-35200
First seen on SecPulse
References
- report discourse.igniterealtime.org