Cross Site Scripting

Liferay Portal is vulnerable to Cross Site Scripting. The vulnerability is due to inadequate input validation and output sanitization on the Language Override edit screen, allowing remote attackers to inject arbitrary web script or HTML via the...