Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting

🗓️ 21 Feb 2024 03:37:30Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Vulnerability in Liferay Portal Message Board widget and Liferay DXP

Reporter	Title	Published	Views	Family All 8
Prion	Cross site scripting	21 Feb 202402:15	–	prion
Veracode	Cross-Site Scripting	22 Feb 202406:29	–	veracode
Vulnrichment	CVE-2024-25152	21 Feb 202402:00	–	vulnrichment
Github Security Blog	Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting	21 Feb 202403:30	–	github
NVD	CVE-2024-25152	21 Feb 202402:15	–	nvd
Cvelist	CVE-2024-25152	21 Feb 202402:00	–	cvelist
CVE	CVE-2024-25152	21 Feb 202402:15	–	cve
Tenable Nessus	Liferay Portal 7.4.x < 7.4.3.4 Multiple Vulnerabilities	23 Feb 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-25152
github	www.github.com/liferay/liferay-portal
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25152

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2024 03:30Current

5.2Medium risk

Vulners AI Score5.2

CVSS39

EPSS0.0004

SSVC