PT-2022-26259

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.36 Liferay DXP 7.4 before update 37 Description A Cross-site scripting XSS vulnerability in the Role module's edit role assignees page allows remote attackers to inject arbitrary web script or HTML...