CVE-2025-43741

Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.3, 2024.Q4.0–Q4.7, 2024.Q3.1–Q3.13, 2024.Q2.0–Q2.13, 2024.Q1.1–Q1.14, and 7.4 GA through update 92 are affected by a reflected XSS vulnerability. The root cause is insufficient input sanitization in the _com_liferay_users_admin_web_...