-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.igniterealtime.openfire:parent | maven | < 4.1.7 | 4.1.7 |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in setup-host-settings.jsp's handling of the 'domain' parameter. While exact patch details are unavailable, the consistent references to this JSP file and parameter across all vulnerability descriptions indicate the XSS occurs when the domain value is rendered without proper escaping. In Java JSP implementations, this would correspond to the auto-generated _jspService() method in the compiled servlet class for this JSP file, which handles request processing and output generation.