EUVD-2019-6971

Malware in sbrugna...

GHSA-M2GX-7PVX-3GVG Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

CVE-2019-16147

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

CVE-2019-16147

CVE-2019-16147 targets Liferay Portal up to version 7.2.0 GA1. The issue is an XSS in com.liferay.journal.taglib, exploitable via the journal article title submitted to journal_article/page.jsp in journal/journal-taglib. This is described across multiple sources (Red Hat, OSV, GHSA, NVD) as a cro...

CVE-2019-16147

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

PT-2019-14543

Name of the Vulnerable Software and Affected Versions Liferay Portal versions prior to 7.2.0 GA1 Description The issue allows for XSS via a journal article title to the "journal article/page.jsp" page in "journal/journal-taglib". Recommendations For versions prior to 7.2.0 GA1, update to a versio...