Lucene search

K
osvGoogleOSV:CVE-2021-38264
HistoryMar 03, 2022 - 12:15 a.m.

CVE-2021-38264

2022-03-0300:15:07
Google
osv.dev
6

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter. This issue is caused by an incomplete fix in CVE-2021-35463.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

Related for OSV:CVE-2021-38264