CVE-2022-26594

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to 1 Forms module's form builder, or 2 App Builder module's object form...

CVE-2022-26594

CVE-2022-26594 affects Liferay Portal 7.3.5–7.4.0 and Liferay DXP 7.3 before Service Pack 3. The vulnerability is a cross-site scripting (XSS) issue where remote attackers can inject arbitrary web script or HTML via a form field's help text in the Forms module form builder or the App Builder modu...