Apache NiFi 1.0.0 / 1.1.0 Cross Site Scripting

Apache NiFi versions 1.0.0 and 1.1.0 suffer from a cross site scripting vulnerability.