CVE-2025-27867

The Apache Felix HTTP Webconsole Plugin (versions 1.X through 1.2.0 ) is vulnerable to Cross-site Scripting (XSS) due to the lack of protective measures for the web page structure and improper neutralization of input during web page generation. A malicious actor can exploit this vulnerability to ...