Cross site scripting

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page...