CVE-2020-24604

A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1

published September 2, 2020

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in server-properties.jsp and security-audit-viewer.jsp

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01169 · 67.1th percentile
Published
2020-09-02T14:40Z
EPSS history
Timeline
  • 02 SEP 14:40Z
    A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1
    cvelistv5