CVE-2021-33339

Cross-site scripting XSS vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7.2 before fix pack 9 allows remote attackers to inject arbitrary web script or HTML via the comliferaysiteadminwebportletSiteAdminPortletname parameter...

CVE-2021-33339

CVE-2021-33339 is a cross-site scripting (XSS) vulnerability affecting Liferay Portal 7.2.1–7.3.4 and Liferay DXP 7.2 prior to fix pack 9. The issue is triggered via the _com_liferay_site_admin_web_portlet_SiteAdminPortlet_name parameter in the Fragment module, enabling remote attackers to inject...

PT-2021-20120

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.2.1 through 7.3.4 Liferay DXP 7.2 before fix pack 9 Description A cross-site scripting XSS issue in the Fragment module allows remote attackers to inject arbitrary web script or HTML via the com liferay site admin web...