Description Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS. References https://www.exploit-db.com/exploits/49235