OF-836 CVE-2015-6972 rXSS in import-keystore...
OF-836 CVE-2015-6972 rXSS in import-keystore...

Reflected XSS in import-keystore-certificate.jsp via the passphrase.

Reported by Florian Nivette of Sysdream.

akrherz/Openfire,GregDThomas/Openfire,guusdk/Openfire,Gugli/Openfire,akrherz/Openfire,Gugli/Openfire,guusdk/Openfire,akrherz/Openfire,Gugli/Openfire,GregDThomas/Openfire,GregDThomas/Openfire,igniterealtime/Openfire,speedy01/Openfire,guusdk/Openfire,GregDThomas/Openfire,igniterealtime/Openfire,speedy01/Openfire,akrherz/Openfire,igniterealtime/Openfire,igniterealtime/Openfire,akrherz/Openfire,guusdk/Openfire,Gugli/Openfire,Gugli/Openfire,speedy01/Openfire,speedy01/Openfire,speedy01/Openfire,GregDThomas/Openfire,igniterealtime/Openfire,guusdk/Openfire