EUVD-2019-6971

Malware in sbrugna...

GHSA-M2GX-7PVX-3GVG Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

CVE-2019-16147

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

CVE-2019-16147

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journalarticle/page.jsp in journal/journal-taglib...

CVE-2019-16147

CVE-2019-16147 targets Liferay Portal up to version 7.2.0 GA1. The issue is an XSS in com.liferay.journal.taglib, exploitable via the journal article title submitted to journal_article/page.jsp in journal/journal-taglib. This is described across multiple sources (Red Hat, OSV, GHSA, NVD) as a cro...