CVE-2014-2963: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in group/controlpanel/manage in Liferay Portal 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE allow remote attackers to inject arbitrary web script or HTML via the 1 2firstName, 2 2lastName, or 3 2middleName parameter...