Undisclosed Apache Velocity XSS vulnerability impacts GOV sites

An undisclosed XSS vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASA. […]