EDB-38191

PoC

Openfire 3.10.2 - Multiple Cross-Site Scripting Vulnerabilities

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2015-09-15catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-6972US	medium4.3	8.00% (95th)	Exploit	2015-09-16
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to inject arbitrary web script or HTML via the (1) groupchatName param…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.