JBoss KeyCloak: XSS in login-status-iframe.htmlReferenceshttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3656https://access.redhat.com/security/cve/cve-2014-3656