CVE-2005-4876
Openfire <2.3.0 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-4877.
Scores
EPSS
0.0022
EPSS Percentile
45.0%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
ignite_realtime/openfire
Timeline
Published
Dec 31, 2005
Tracked Since
Feb 18, 2026