2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in themes/unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile...
4.3CVSS5.6AI score0.01338EPSS
SaveExploits0References4Affected Software1
CVE-2008-0180: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in themes/unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile...
4.3CVSS5.9AI score0.01338EPSS
SaveExploits0References2
20