CVE-2020-35202

creationtimestamp| type| source ---|---|--- 2020-12-12 20:36:46+00:00| seen| https://t.me/cibsecurity/20729...

CVE-2020-35202

Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS...

CVE-2020-35202

CVE-2020-35202 affects Ignite Realtime Openfire 4.6.0, with a Stored XSS vulnerability in the db-access.jsp file of the dbaccess plugin. The issue is triggered through SQL handling in that component, enabling script injection under the described conditions. Connected sources corroborate Openfire ...