CVE-2025-62238

🗓️ 10 Oct 2025 13:15:48Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 3 Views

Stored cross-site scripting on the Membership page allows authenticated attackers to inject script via the Name field.

Reporter	Title	Published	Views	Family All 12
CNNVD	Liferay Portal和Liferay DXP 跨站脚本漏洞	10 Oct 202500:00	–	cnnvd
CVE	CVE-2025-62238	10 Oct 202512:33	–	cve
Cvelist	CVE-2025-62238	10 Oct 202512:33	–	cvelist
EUVD	EUVD-2025-33720	10 Oct 202515:31	–	euvd
Github Security Blog	Liferay Portal's Membership page is vulnerable to XSS through “name“ text field	10 Oct 202515:31	–	github
OSV	CVE-2025-62238	10 Oct 202513:15	–	osv
OSV	GHSA-XW6M-3M5Q-MXPM Liferay Portal's Membership page is vulnerable to XSS through “name“ text field	10 Oct 202515:31	–	osv
Positive Technologies	PT-2025-41560	10 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-62238	11 Oct 202513:05	–	redhatcve
Snyk	Cross-site Scripting (XSS)	10 Oct 202515:31	–	snyk

NVD

Node

liferay digital_experience_platformRange2023.q3.1–2023.q3.9

OR

liferay digital_experience_platformRange2023.q4.0–2023.q4.6

OR

liferay digital_experience_platformMatch7.4update21

OR

liferay digital_experience_platformMatch7.4update22

OR

liferay digital_experience_platformMatch7.4update23

OR

liferay digital_experience_platformMatch7.4update24

OR

liferay digital_experience_platformMatch7.4update25

OR

liferay digital_experience_platformMatch7.4update26

OR

liferay digital_experience_platformMatch7.4update27

OR

liferay digital_experience_platformMatch7.4update28

OR

liferay digital_experience_platformMatch7.4update29

OR

liferay digital_experience_platformMatch7.4update30

OR

liferay digital_experience_platformMatch7.4update31

OR

liferay digital_experience_platformMatch7.4update32

OR

liferay digital_experience_platformMatch7.4update33

OR

liferay digital_experience_platformMatch7.4update34

OR

liferay digital_experience_platformMatch7.4update35

OR

liferay digital_experience_platformMatch7.4update36

OR

liferay digital_experience_platformMatch7.4update37

OR

liferay digital_experience_platformMatch7.4update38

OR

liferay digital_experience_platformMatch7.4update39

OR

liferay digital_experience_platformMatch7.4update40

OR

liferay digital_experience_platformMatch7.4update41

OR

liferay digital_experience_platformMatch7.4update42

OR

liferay digital_experience_platformMatch7.4update43

OR

liferay digital_experience_platformMatch7.4update44

OR

liferay digital_experience_platformMatch7.4update45

OR

liferay digital_experience_platformMatch7.4update46

OR

liferay digital_experience_platformMatch7.4update47

OR

liferay digital_experience_platformMatch7.4update48

OR

liferay digital_experience_platformMatch7.4update49

OR

liferay digital_experience_platformMatch7.4update50

OR

liferay digital_experience_platformMatch7.4update51

OR

liferay digital_experience_platformMatch7.4update52

OR

liferay digital_experience_platformMatch7.4update53

OR

liferay digital_experience_platformMatch7.4update54

OR

liferay digital_experience_platformMatch7.4update55

OR

liferay digital_experience_platformMatch7.4update56

OR

liferay digital_experience_platformMatch7.4update57

OR

liferay digital_experience_platformMatch7.4update58

OR

liferay digital_experience_platformMatch7.4update59

OR

liferay digital_experience_platformMatch7.4update60

OR

liferay digital_experience_platformMatch7.4update61

OR

liferay digital_experience_platformMatch7.4update62

OR

liferay digital_experience_platformMatch7.4update63

OR

liferay digital_experience_platformMatch7.4update64

OR

liferay digital_experience_platformMatch7.4update65

OR

liferay digital_experience_platformMatch7.4update66

OR

liferay digital_experience_platformMatch7.4update67

OR

liferay digital_experience_platformMatch7.4update68

OR

liferay digital_experience_platformMatch7.4update69

OR

liferay digital_experience_platformMatch7.4update70

OR

liferay digital_experience_platformMatch7.4update71

OR

liferay digital_experience_platformMatch7.4update72

OR

liferay digital_experience_platformMatch7.4update73

OR

liferay digital_experience_platformMatch7.4update74

OR

liferay digital_experience_platformMatch7.4update75

OR

liferay digital_experience_platformMatch7.4update76

OR

liferay digital_experience_platformMatch7.4update77

OR

liferay digital_experience_platformMatch7.4update78

OR

liferay digital_experience_platformMatch7.4update79

OR

liferay digital_experience_platformMatch7.4update80

OR

liferay digital_experience_platformMatch7.4update81

OR

liferay digital_experience_platformMatch7.4update82

OR

liferay digital_experience_platformMatch7.4update83

OR

liferay digital_experience_platformMatch7.4update84

OR

liferay digital_experience_platformMatch7.4update85

OR

liferay digital_experience_platformMatch7.4update86

OR

liferay digital_experience_platformMatch7.4update87

OR

liferay digital_experience_platformMatch7.4update88

OR

liferay digital_experience_platformMatch7.4update89

OR

liferay digital_experience_platformMatch7.4update90

OR

liferay digital_experience_platformMatch7.4update91

OR

liferay digital_experience_platformMatch7.4update92

OR

liferay liferay_portalRange7.4.3.21–7.4.3.112

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62238

17 Jun 2026 09:51Current

CVSS 3.15.4

CVSS 44.8

EPSS0.002

liferay portal membership page account settings cross site scripting name field authenticated attackers