CVE-2019-16147

2019-09-0921:15:11

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.

CPENameOperatorVersion
liferay-portaleqsync-3.0.3-b4
liferay-portaleqsync-3.0.1-b2
liferay-portaleq7.0.0-m1
liferay-portaleq6.1.0-b4
liferay-portaleq6.2.0-b1
liferay-portaleq7.0.0-m4
liferay-portaleq7.1.0-b2
liferay-portaleq6.2.0-b2
liferay-portaleq6.1.0-rc1
liferay-portaleqsync-3.0.0-b1

Name	Operator	Version
liferay-portal	eq	sync-3.0.3-b4
liferay-portal	eq	sync-3.0.1-b2
liferay-portal	eq	7.0.0-m1
liferay-portal	eq	6.1.0-b4
liferay-portal	eq	6.2.0-b1
liferay-portal	eq	7.0.0-m4
liferay-portal	eq	7.1.0-b2
liferay-portal	eq	6.2.0-b2
liferay-portal	eq	6.1.0-rc1
liferay-portal	eq	sync-3.0.0-b1