Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.
{ "cpes": [ "cpe:2.3:a:igniterealtime:openfire:4.6.0:*:*:*:*:*:*:*" ], "severity": "Medium" }