Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.
{ "cpes": [ "cpe:2.3:a:igniterealtime:openfire:4.6.0:*:*:*:*:*:*:*" ], "severity": "Medium" }