Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
igniterealtime openfire 4.6.0