Liferay Enterprise Portal 1.x/2.x/5.0.2 - Multiple XSS Vulnerabilities

ID SSV:77874
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


It has been reported that Liferay Enterprise Portal is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. User-supplied data from many input fields is included in server generated content without appropriate validation/encoding. This may allow for typical cross-site scripting attacks against other users of the portal. 

Add a message with subject <script>history.go(-1)</script>
Now, no user can see message board.