2 matches found
CVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
6.1CVSS7.3AI score0.00748EPSS
SaveExploits3References2
CVE-2017-12648
CVE-2017-12648 affects Liferay Portal before 7.0 CE GA4 and is a cross-site scripting (XSS) issue exploitable via a bookmark URL. Public details indicate the vulnerability stems from com.liferay.frontend.taglib not escaping the value attribute in bookmark URLs, enabling script injection. NVD data...
6.1CVSS5.9AI score0.00748EPSS
SaveExploits3References2Affected Software1
20