Stored Cross-Site Scripting (XSS)

Liferay Portal is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization in the Wiki widget’s ‘Content’ text field, which allows a remote attacker to inject arbitrary web scripts or HTML into a parent wiki page via a crafted payload...

BIT-LIFERAY-2023-42628

Stored cross-site scripting XSS vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88 allows remote attackers to inject...

Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget

Stored cross-site scripting XSS vulnerability in the Wiki widget in Liferay Wiki Web before 7.0.95 from Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88...

GHSA-HV45-R2F5-FMHJ Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget

Stored cross-site scripting XSS vulnerability in the Wiki widget in Liferay Wiki Web before 7.0.95 from Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88...

CVE-2023-42628: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88 allows remote attackers to inject...

PT-2023-28456 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.1.0 through 7.4.3.87 Liferay DXP versions 7.0 fix pack 83 through 102 Liferay DXP versions 7.1 fix pack 28 and earlier Liferay DXP versions 7.2 fix pack 20 and earlier Liferay DXP versions 7.3 update 33 and earlier...

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...