Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.
igniterealtime openfire 4.6.0