Reflected Cross Site Scripting (XSS)

Liferay Liferay Portal and Liferay DXP are vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper input sanitization in the comliferaytranslationwebinternalportletTranslationPortletredirect parameter on the Export for Translation page, which allows a remote attacke...

Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page

Reflected cross-site scripting XSS vulnerability on the Export for Translation page before 2.0.86 from Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2023-42497

Reflected cross-site scripting XSS vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2023-42497: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting XSS vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the...

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...