WS-2021-0173

In spring-framework, versions v3.0.0.M1 through v3.0.5.RELEASE are vulnerable to Cross-Site Scripting XSS, due to LocaleChangeInterceptor not escaping the Locale value from a user HTTP request...