Openfire version 4.8.0 suffers from authentication bypass and code injection vulnerabilities.