CVE-2020-36956 in Openfire
요약
\~에 의해 MITRE • 2026. 01. 26.
Openfire 4.6.0 contains a stored cross-site scripting vulnerability in the nodejs plugin that allows attackers to inject malicious scripts through the 'path' parameter. Attackers can craft a payload with script tags to execute arbitrary JavaScript in the context of administrative users viewing the nodejs configuration page.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.