CVE-2005-4877
Openfire 2.3.0 Beta 2 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than CVE-2005-4876.
Scores
EPSS
0.0022
EPSS Percentile
45.0%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
ignite_realtime/openfire
Timeline
Published
Dec 31, 2005
Tracked Since
Feb 18, 2026