Org.jboss.hal:hal-console: wildfly hal console cross-site scripting (CVE-2025-23366) | HOL Guard CVE