In which admin screen/under which tab/menu can I fix this?

Getting this under HTTP file upload settings:

The delta is the xmpp host name of the server which is present in the Server Host Name (FQDN) on the Server Information/Environment. So, I am not sure where the URL in the warning that lacks the xmppcomes from or how/where to fix this, assuming that this needs fixing. Users are able to exchange files, images, video and voice.

Hmm… I can’t see a good reason for Openfire to issue that warning. I can see how this sometimes could be an issue, but it certainly isn’t an issue for many (most?) instances of Openfire.

I have created a new ticket for this to be looked at here: Improve or remove admin console warning about exposed endpoint · Issue #82 · igniterealtime/openfire-httpFileUpload-plugin · GitHub

For now, I think you can just ignore this warning - especially if file sharing works (although that could, under water, use a different mechanism than the one offered by this plugin. To double check, you could inspect your hard drive, to see if uploaded content is stored in files there. If that’s the case, then you can be sure that this plugin is being used).