CVE-2021-33339

Cross-site scripting XSS vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7.2 before fix pack 9 allows remote attackers to inject arbitrary web script or HTML via the comliferaysiteadminwebportletSiteAdminPortletname parameter...

PT-2021-20120

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.2.1 through 7.3.4 Liferay DXP 7.2 before fix pack 9 Description A cross-site scripting XSS issue in the Fragment module allows remote attackers to inject arbitrary web script or HTML via the com liferay site admin web...