An XSS issue exists in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.
igniterealtime openfire 4.4.4