EUVD-2022-45203

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Cross-site scripting vulnerability in Liferay Portal allowing remote web script injection.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-42117	12 May 202518:29	–	circl
CNNVD	Liferay Portal和Liferay DXP 跨站脚本漏洞	18 Oct 202200:00	–	cnnvd
CVE	CVE-2022-42117	18 Oct 202200:00	–	cve
Cvelist	CVE-2022-42117	18 Oct 202200:00	–	cvelist
Github Security Blog	Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module	19 Oct 202212:00	–	github
NCSC	Vulnerabilities fixed in Liferay Portal	15 Nov 202200:00	–	ncsc
NVD	CVE-2022-42117	18 Oct 202221:15	–	nvd
OSV	CVE-2022-42117	18 Oct 202221:15	–	osv
OSV	GHSA-G6R2-6X46-JPP6 Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module	19 Oct 202212:00	–	osv
Prion	Cross site scripting	18 Oct 202221:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "6404affe-713e-361d-9bfb-ab65977d3279",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "63bdeedc-f41e-3a4b-97a9-9f7abd59fe4b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
liferay	www.liferay.com/
portal	www.portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42117
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-42117
github	www.github.com/liferay/liferay-portal/commit/a0d25a757f002c39d02b93938bc11feb3b0de6f6
liferay	www.liferay.atlassian.net/browse/LPE-17497
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-42117
web	www.web.archive.org/web/20221205223431/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42117

03 Oct 2025 20:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.00118

SSVC