PT-2021-11143

Name of the Vulnerable Software and Affected Versions: Liferay CMS Portal versions 7.1.3 through 7.2.1 Description: The issue is a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert a malicious payload on the username, lastname, ...

CVE-2020-25476: Improper Neutralization of Input During Web Page Generation

Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected...

CVE-2019-13633

Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, or Odnoklassniki. This is mishandled within the administration panel for...