Cross-site Scripting (XSS)

com.liferay:com.liferay.announcements.web is vulnerable to cross-site scripting XSS. The library does not properly escape HTML entities in search-container-column-text in view.jsp, which allows an attacker to inject and execute malicious JavaScript...