Security Advisory
CVE-2020-24601
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page