CVE-2019-16147

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

CVE-2019-16147

CVE-2019-16147 targets Liferay Portal up to version 7.2.0 GA1. The issue is an XSS in com.liferay.journal.taglib, exploitable via the journal article title submitted to journal_article/page.jsp in journal/journal-taglib. This is described across multiple sources (Red Hat, OSV, GHSA, NVD) as a cro...