Lucene search
PRIOn knowledge basePRION:CVE-2024-25602HistoryFeb 21, 2024 - 2:15 a.m.
Cross site scripting
2024-02-2102:15:00
PRIOn knowledge base
www.prio-n.com
11
stored xss
liferay portal
dxp
remote authenticated users
html injection
Stored cross-site scripting (XSS) vulnerability in Users Admin module’s edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into an organization’s “Name” text field
Related
osv
osv
nvd
nvd
CVE-2024-25602
2024-02-21 02:15:30
veracode
veracode
Cross Site Scripting
2024-02-22 09:26:34
cvelist
cvelist
CVE-2024-25602
2024-02-21 01:45:15
cve
cve
CVE-2024-25602
2024-02-21 02:15:30
github
github
nessus
nessus
Liferay Portal 7.4.x < 7.4.3.4 Multiple Vulnerabilities
2024-02-23 00:00:00