CVE-2017-12646

XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address...

CVE-2017-12646

CVE-2017-12646 describes a cross-site scripting (XSS) vulnerability in Liferay Portal prior to version 7.0 CE GA4, exploitable via login name, password, or e-mail address. The affected product is Liferay Portal; the issue arises from insufficient escaping of input in multiple login-related fields...