Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/08 3:32 p.m.7 views

GHSA-893R-JR58-3HXR Liferay Portal Commerce Shop is vulnerable to Stored XSS through SVG file

There is a Stored Cross-Site Scripting XSS vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 18 through update 92. This vulnerability allows remote attackers to...

4.8CVSS4.9AI score0.00207EPSS
SaveExploits0References4
Rows per page
Query Builder