CVE-2023-33937

Stored cross-site scripting XSS vulnerability in Form widget configuration in Liferay Portal 7.1.0 through 7.3.0, and Liferay DXP 7.1 before fix pack 18, and 7.2 before fix pack 5 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a form's name fiel...

CVE-2023-33937

creationtimestamp| type| source ---|---|--- 2023-05-24 16:26:55+00:00| seen| https://t.me/cibsecurity/64678...

CVE-2023-33937

CVE-2023-33937 is a stored XSS weakness in the Form widget configuration of Liferay Portal 7.1.0–7.3.0 and Liferay DXP 7.1 (before fix pack 18) and 7.2 (before fix pack 5). The vulnerability allows remote attackers to inject arbitrary script/HTML via a crafted payload in the form’s name field. Se...