EUVD-2021-20045

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross-site scripting vulnerability in Liferay Portal allows remote script injection via parameters.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-33337	4 Aug 202119:24	–	circl
CNNVD	Liferay Portal和Liferay DXP 跨站脚本漏洞	4 Aug 202100:00	–	cnnvd
CVE	CVE-2021-33337	4 Aug 202113:15	–	cve
Cvelist	CVE-2021-33337	4 Aug 202113:15	–	cvelist
Github Security Blog	Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module	24 May 202219:10	–	github
NVD	CVE-2021-33337	4 Aug 202114:15	–	nvd
OSV	CVE-2021-33337	4 Aug 202114:15	–	osv
OSV	GHSA-V88G-7FX4-9Q7F Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module	24 May 202219:10	–	osv
Prion	Cross site scripting	4 Aug 202114:15	–	prion
RedhatCVE	CVE-2021-33337	22 May 202519:47	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "b58bfb5e-43f3-387d-a581-1997906641a5",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "013f0f76-b838-3ca1-9331-c1a5675d87ef",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
portal	www.portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2021-33337-stored-xss-with-document-types-in-documents-and-media
issues	www.issues.liferay.com/browse/LPE-17101
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33337
github	www.github.com/liferay/liferay-portal/commit/432e9eb911d11ff40e1db652690586e496940633
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2021-33337
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1

CVSS 24.3

EPSS0.00258