CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

Github Security Blog•added 2025/09/09 3:31 p.m.•25 views

Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting

A stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and 7.4 GA...

5.4CVSS5.7AI score0.00215EPSS

SaveExploits0References4Affected Software3

NVD•added 2025/09/09 3:15 p.m.•37 views

CVE-2025-43776

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and 7.4 GA...

5.4CVSS0.00215EPSS

SaveExploits0References1

Mend•added 2025/09/09 2:18 p.m.•8 views

CVE-2025-43776

5.4CVSS5.7AI score0.00215EPSS

SaveExploits0References4

Vulnrichment•added 2025/09/09 2:18 p.m.•7 views

CVE-2025-43776

4.6CVSS5.7AI score0.00215EPSS

SaveExploits0References1

CVE•added 2025/09/09 2:18 p.m.•45 views

CVE-2025-43776

CVE-2025-43776 is a stored cross-site scripting vulnerability in Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–Q2.9 (plus earlier 2024 Q1–Q4 releases) where an authenticated attacker can inject JavaScript via the Custom Object field label. The malicious payload is stored and executed v...

5.4CVSS5.7AI score0.00215EPSS

SaveExploits0References1Affected Software2

Rapid7 Vulnerability Database (full)•added 2025/09/09 12:00 a.m.•8 views

CVE-2025-43776: Generation of Error Message Containing Sensitive Information

5.4CVSS5.7AI score0.00215EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by