Lucene search

K
osvGoogleOSV:BIT-2023-44310
HistoryOct 25, 2023 - 6:20 a.m.

BIT-2023-44310

2023-10-2506:20:17
Google
osv.dev
19
cross-site scripting
page tree menu
remote attack
html injection
liferay portal 7.3
liferay portal 7.4
vulnerability

EPSS

0.001

Percentile

21.3%

Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page’s “Name” text field.

EPSS

0.001

Percentile

21.3%

Related for OSV:BIT-2023-44310