CVE-2025-25247

Apache Felix Webconsole (versions 4.x up to 4.9.8 and 5.x up to 5.0.8) is vulnerable to Cross-site Scripting (XSS) due to the improper neutralization of user-supplied input during web page generation. Specifically, the renderContent() function in ServicesServlet.java fails to validate or escape i...