CVE-2020-25476

CVE-2020-25476 affects Liferay CMS Portal versions 7.1.3 and 7.2.1 via a blind persistent XSS in the Calendar module’s handling of the username/lastname/surname fields in user profiles. The vulnerability allows an attacker to inject payloads that are reflected in the attacker’s own calendar and c...