Cross-site Scripting (XSS)

com.liferay:com.liferay.announcements.web is vulnerable to cross-site scripting XSS. The library does not properly escape HTML entities in search-container-column-text in view.jsp, which allows an attacker to inject and execute malicious JavaScript...

Cross-site Scripting (XSS)

com.liferay.asset.browser.web is vulnerable to cross-site scripting XSS. The vulnerability exists as the values of assetRenderer.getTitlelocale and assetRenderer.getSummaryrenderRequest, renderResponse in resources/view.jsp is not sanitized...

secondspin.com XSS vulnerability

Vulnerable URL: https://www.secondspin.com/stores/ss/multiple-view.jsp?mainTabMode=buy=12=B%3C/title%3E%22%3E%3Csvg/onload=alert/XSSPOSED/%3E=700 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...