Cross site scripting

2022-04-2516:16:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

42.7%

JSON

Cross-site scripting (XSS) vulnerability in the Layout module’s Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name.

CPENameOperatorVersion
digital_experience_platformeq7.3 fixpack1
digital_experience_platformeq7.3
digital_experience_platformlt7.3
digital_experience_platformeq7.3 fixpack2
liferay_portalge7.3.0
liferay_portalle7.4.0

Name	Operator	Version
digital_experience_platform	eq	7.3 fixpack1
digital_experience_platform	eq	7.3
digital_experience_platform	lt	7.3
digital_experience_platform	eq	7.3 fixpack2
liferay_portal	ge	7.3.0
liferay_portal	le	7.4.0

References

liferay.com

0.001 Low

EPSS

Percentile

42.7%

JSON

Related for PRION:CVE-2022-26597