com.liferay:com.liferay.asset.categories.navigation.web (>=1.0.0, <=2.0.6), com.liferay:com.liferay.asset.taglib.freemarker.contributor (2.0.0) potentially affected by CVE-2022-28982 via com.liferay:com.liferay.asset.taglib (2.0.0)

com.liferay:com.liferay.asset.taglib MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay:com.liferay.asset.taglib and may be impacted: - com.liferay:com.liferay.asset.categories.navigation.web =1.0.0, =2.0.6 -...

Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name

A cross-site scripting XSS vulnerability in Liferay Asset Taglib before v6.1.9 from Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag...