Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the redirect field in the init.jsp process. An attacker can execute arbitrary scripts in the context of a user's browser by crafting a malicious redirect value. Details Cross-site scripting or XSS is a code...

GHSA-JMJF-CMQ5-7W25 Liferay Portal Vulnerable to XSS via a Crafted Redirect Field

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp...

Liferay Portal Vulnerable to XSS via a Crafted Redirect Field

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp...

CVE-2016-10404: Improper Neutralization of Input During Web Page Generation

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp...