1 matches found
GHSA-RVMF-JW8G-R35R Liferay Portal vulnerable to Stored XSS in Components portlet
Stored cross-site scripting XSS vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script or HTML via...
4.6CVSS5.4AI score0.00224EPSS
SaveExploits0References5
20