Liferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp page

Cross-site scripting XSS vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter...

GHSA-2GGW-8GMC-R2GQ Liferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp page

Cross-site scripting XSS vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter...

CVE-2017-1000425

Cross-site scripting XSS vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter...

PT-2018-5200

Name of the Vulnerable Software and Affected Versions Liferay Portal CE versions prior to 7.0 GA4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a javascript: URI in the movie parameter in the "/html/portal/flash.jsp" page...

CVE-2017-1000425: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter...

my.millikin.edu XSS vulnerability

Vulnerable URL: https://my.millikin.edu/muportal/public/flash.jsp?movie=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...