Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the openResultToast function in InfoItemActionHandler.js, accessible via layout-taglib/liferay/index.js. An attacker can inject scripts by manipulating the toastData parameter. Details Cross-site scripting or...

Liferay Portal cross-site scripting vulnerabilities

Liferay Portal is a J2EE-based portal solution from the US company Liferay. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, and so on. A cross-site scripting vulnerability exis...