An XSS issue exists in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
igniterealtime openfire 4.4.4