= 1.6.6
JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.