Reflected XSS in exception trace

The detailed information shown on errors contains an unescaped stack trace, which can be used to inject JavaScript. Example using an invalid revision:

http://localhost:8080/xwiki/bin/viewrev/Main/WebHome?rev=%3Cscript%3Ealert%28%22buh%22%29%3C%2Fscript%3E