CVE-2020-36956 in Openfire
要約
〜によって MITRE • 2026年01月26日
Openfire 4.6.0 contains a stored cross-site scripting vulnerability in the nodejs plugin that allows attackers to inject malicious scripts through the 'path' parameter. Attackers can craft a payload with script tags to execute arbitrary JavaScript in the context of administrative users viewing the nodejs configuration page.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.