Cross site scripting

2022-03-0300:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

49.6%

JSON

Cross-site scripting (XSS) vulnerability in the Server module’s script console in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 101, 7.1 before fix pack 20 and 7.2 before fix pack 10 allows remote attackers to inject arbitrary web script or HTML via the output of a script.

CPENameOperatorVersion
digital_experience_platformeq7.2
digital_experience_platformeq7.2 fixpack1
digital_experience_platformeq7.2 fixpack2
digital_experience_platformeq7.2 fixpack3
digital_experience_platformeq7.2 fixpack5
digital_experience_platformeq7.2 fixpack4
digital_experience_platformeq7.1 fixpack6
digital_experience_platformeq7.1 fixpack9
digital_experience_platformeq7.1 fixpack10
digital_experience_platformeq7.1 fixpack11

Name	Operator	Version
digital_experience_platform	eq	7.2
digital_experience_platform	eq	7.2 fixpack1
digital_experience_platform	eq	7.2 fixpack2
digital_experience_platform	eq	7.2 fixpack3
digital_experience_platform	eq	7.2 fixpack5
digital_experience_platform	eq	7.2 fixpack4
digital_experience_platform	eq	7.1 fixpack6
digital_experience_platform	eq	7.1 fixpack9
digital_experience_platform	eq	7.1 fixpack10
digital_experience_platform	eq	7.1 fixpack11