Cross site scripting

Cross-site scripting XSS vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter. This issue is caused by an incomplete fix in CVE-2021-35463...

PT-2021-20919

Name of the Vulnerable Software and Affected Versions: Liferay Portal version 7.4.0 Description: A cross-site scripting XSS issue in the Frontend Taglib module allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter...