A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious …