CVE-2020-35200

creationtimestamp| type| source ---|---|--- 2020-12-12 20:36:46+00:00| seen| https://t.me/cibsecurity/20728...

CVE-2020-35200

CVE-2020-35200 affects Ignite Realtime Openfire 4.6.0, specifically the plugin file plugins/clientcontrol/spark-form.jsp, with a Reflective XSS flaw. The connected sources confirm the vulnerability in this exact component and version; exploitation status or in-the-wild details are not provided. M...