Openfire 4.6.0 has Reflective XSS vulnerabilities

Openfire Plugins
1

Openfire 4.6.0 has Reflective XSS vulnerabilities.

url：
http://192.168.137.137:9090/plugins/clientcontrol/spark-form.jsp?windowsClient=varify.exe&optionalMessage=&submit=更新Spark版本

payload：

222
2221319×766 87.2 KB

Author：j5s