Liferay Portal Cross-Site Scripting Vulnerability (CNVD-2021-62963)

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB and JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay Portal has a cross-site scripting vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML into the administrative toolbar search.