Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:igniterealtime:openfire:4.6.0:*:*:*:*:*:*:*" ] }
"https://github.com/bitnami/vulndb/tree/main/data/openfire/BIT-openfire-2020-35200.json"