4 matches found
CVE-2023-44309
Multiple stored cross-site scripting XSS vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.4.3.53, and Liferay DXP 7.4 before update 54 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into any non-HTML field of a linked sourc...
CVE-2023-44309
Multiple stored cross-site scripting XSS vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.4.3.53, and Liferay DXP 7.4 before update 54 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into any non-HTML field of a linked sourc...
CVE-2023-44309
The CVE-2023-44309 entry applies to Liferay Portal versions 7.4.2–7.4.3.53 and Liferay DXP 7.4 prior to update 54. The vulnerability is described as stored cross-site scripting (XSS) in fragment components, where a crafted payload injected into any non-HTML field of a linked source asset can be e...
CVE-2023-44309
Multiple stored cross-site scripting XSS vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.4.3.53, and Liferay DXP 7.4 before update 54 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into any non-HTML field of a linked sourc...