A cross-site scripting (XSS) vulnerability exists in the HAL Console component of Wildfly. The flaw occurs because user-controllable input is not properly neutralized before being included in web page output. Exploitation requires the attacker to be authenticated with management group privileges such as SuperUser, Admin, or Maintainer. This vulnerability has a CVSS score of 6.5, indicating a moderate severity level. Multiple Red Hat advisories provide patches addressing this issue.