Cross site scripting

2023-10-1709:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

stored vulnerability

liferay portal

0.001 Low

EPSS

Percentile

20.7%

JSON

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87, and Liferay DXP 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Vocabulary’s ‘description’ text field.

CPENameOperatorVersion
digital_experience_platformeq7.4 update34
digital_experience_platformeq7.4 update1
digital_experience_platformeq7.4
digital_experience_platformeq7.4 update36
digital_experience_platformeq7.4 update41
digital_experience_platformeq7.4 update52
digital_experience_platformeq7.4 update50
digital_experience_platformeq7.4 update21
digital_experience_platformeq7.4 update62
digital_experience_platformeq7.4 update67

Name	Operator	Version
digital_experience_platform	eq	7.4 update34
digital_experience_platform	eq	7.4 update1
digital_experience_platform	eq	7.4
digital_experience_platform	eq	7.4 update36
digital_experience_platform	eq	7.4 update41
digital_experience_platform	eq	7.4 update52
digital_experience_platform	eq	7.4 update50
digital_experience_platform	eq	7.4 update21
digital_experience_platform	eq	7.4 update62
digital_experience_platform	eq	7.4 update67