CVE-2025-54812

CVE-2025-54812 is an Improper Output Neutralization vulnerability in Apache Log4cxx versions prior to 1.5.0, specifically impacting HTMLLayout. If untrusted data is used for logger names, an attacker could inject HTML or JavaScript into generated log files, potentially leading to Cross-Site Scripting (XSS) when a user views the logs. The CVSS score is 5.4 MEDIUM, indicating a network attack vector with low complexity, requiring user interaction, and resulting in low impact to confidentiality and integrity. While the EPSS and FAUCET scores are low, suggesting a low likelihood of exploitation, there is no known active exploitation, public exploit code, or significant community discussion beyond a single mention and article.