Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-site Scripting (XSS)

🗓️ 11 Sep 2025 10:00:48Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

Liferay Portal is vulnerable to XSS due to improper sanitization of the assetTagNames parameter.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl		CVE-2025-43741
20 Aug 202512:08
–circl
cnnvd		Liferay Portal和Liferay DXP 跨站脚本漏洞
20 Aug 202500:00
–cnnvd
cve		CVE-2025-43741
20 Aug 202511:54
–cve
cvelist		CVE-2025-43741
20 Aug 202511:54
–cvelist
euvd		EUVD-2025-25271
3 Oct 202520:07
–euvd
github		Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter
20 Aug 202512:31
–github
nvd		CVE-2025-43741
20 Aug 202512:15
–nvd
osv		CVE-2025-43741
20 Aug 202512:15
–osv
osv		GHSA-J6P8-G3RJ-GHPM Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter
20 Aug 202512:31
–osv
ptsecurity		PT-2025-34040 · Liferay · Liferay Portal +1
20 Aug 202500:00
–ptsecurity
Rows per page
Vulners
Node
OR
com.liferay.asset.taglibcom.liferay.asset.taglibRange1.0.0–11.1.8java
liferayrelease.portal.bomRange7.4.0–7.4.3.132java
liferayrelease.portal.bomMatch7.4.1java
liferayrelease.portal.bomMatch7.4.1-1java
liferayrelease.portal.bomMatch7.4.2java
liferayrelease.portal.bomMatch7.4.2-1java
liferayrelease.portal.bomMatch7.4.3.10java
liferayrelease.portal.bomMatch7.4.3.100java
liferayrelease.portal.bomMatch7.4.3.101java
liferayrelease.portal.bomMatch7.4.3.102java
liferayrelease.portal.bomMatch7.4.3.103java
liferayrelease.portal.bomMatch7.4.3.104java
liferayrelease.portal.bomMatch7.4.3.105java
liferayrelease.portal.bomMatch7.4.3.106java
liferayrelease.portal.bomMatch7.4.3.107java
liferayrelease.portal.bomMatch7.4.3.11java
liferayrelease.portal.bomMatch7.4.3.112java
liferayrelease.portal.bomMatch7.4.3.112-ga112java
liferayrelease.portal.bomMatch7.4.3.12java
liferayrelease.portal.bomMatch7.4.3.120java
liferayrelease.portal.bomMatch7.4.3.120-ga120java
liferayrelease.portal.bomMatch7.4.3.125java
liferayrelease.portal.bomMatch7.4.3.125-ga125java
liferayrelease.portal.bomMatch7.4.3.129java
liferayrelease.portal.bomMatch7.4.3.13java
liferayrelease.portal.bomMatch7.4.3.14java
liferayrelease.portal.bomMatch7.4.3.15java
liferayrelease.portal.bomMatch7.4.3.16java
liferayrelease.portal.bomMatch7.4.3.17java
liferayrelease.portal.bomMatch7.4.3.18java
liferayrelease.portal.bomMatch7.4.3.19java
liferayrelease.portal.bomMatch7.4.3.20java
liferayrelease.portal.bomMatch7.4.3.20-ga20java
liferayrelease.portal.bomMatch7.4.3.21java
liferayrelease.portal.bomMatch7.4.3.21-ga21java
liferayrelease.portal.bomMatch7.4.3.22java
liferayrelease.portal.bomMatch7.4.3.23java
liferayrelease.portal.bomMatch7.4.3.24java
liferayrelease.portal.bomMatch7.4.3.25java
liferayrelease.portal.bomMatch7.4.3.26java
liferayrelease.portal.bomMatch7.4.3.27java
liferayrelease.portal.bomMatch7.4.3.28java
liferayrelease.portal.bomMatch7.4.3.29java
liferayrelease.portal.bomMatch7.4.3.30java
liferayrelease.portal.bomMatch7.4.3.31java
liferayrelease.portal.bomMatch7.4.3.32java
liferayrelease.portal.bomMatch7.4.3.33java
liferayrelease.portal.bomMatch7.4.3.34java
liferayrelease.portal.bomMatch7.4.3.35java
liferayrelease.portal.bomMatch7.4.3.36java
liferayrelease.portal.bomMatch7.4.3.37java
liferayrelease.portal.bomMatch7.4.3.38java
liferayrelease.portal.bomMatch7.4.3.39java
liferayrelease.portal.bomMatch7.4.3.4java
liferayrelease.portal.bomMatch7.4.3.40java
liferayrelease.portal.bomMatch7.4.3.41java
liferayrelease.portal.bomMatch7.4.3.42java
liferayrelease.portal.bomMatch7.4.3.43java
liferayrelease.portal.bomMatch7.4.3.44java
liferayrelease.portal.bomMatch7.4.3.45java
liferayrelease.portal.bomMatch7.4.3.46java
liferayrelease.portal.bomMatch7.4.3.47java
liferayrelease.portal.bomMatch7.4.3.48java
liferayrelease.portal.bomMatch7.4.3.49java
liferayrelease.portal.bomMatch7.4.3.5java
liferayrelease.portal.bomMatch7.4.3.50java
liferayrelease.portal.bomMatch7.4.3.51java
liferayrelease.portal.bomMatch7.4.3.52java
liferayrelease.portal.bomMatch7.4.3.53java
liferayrelease.portal.bomMatch7.4.3.54java
liferayrelease.portal.bomMatch7.4.3.55java
liferayrelease.portal.bomMatch7.4.3.56java
liferayrelease.portal.bomMatch7.4.3.57java
liferayrelease.portal.bomMatch7.4.3.58java
liferayrelease.portal.bomMatch7.4.3.59java
liferayrelease.portal.bomMatch7.4.3.6java
liferayrelease.portal.bomMatch7.4.3.60java
liferayrelease.portal.bomMatch7.4.3.60-ga60java
liferayrelease.portal.bomMatch7.4.3.61java
liferayrelease.portal.bomMatch7.4.3.61-ga61java
liferayrelease.portal.bomMatch7.4.3.62java
liferayrelease.portal.bomMatch7.4.3.63java
liferayrelease.portal.bomMatch7.4.3.64java
liferayrelease.portal.bomMatch7.4.3.65java
liferayrelease.portal.bomMatch7.4.3.66java
liferayrelease.portal.bomMatch7.4.3.67java
liferayrelease.portal.bomMatch7.4.3.68java
liferayrelease.portal.bomMatch7.4.3.69java
liferayrelease.portal.bomMatch7.4.3.7java
liferayrelease.portal.bomMatch7.4.3.70java
liferayrelease.portal.bomMatch7.4.3.71java
liferayrelease.portal.bomMatch7.4.3.72java
liferayrelease.portal.bomMatch7.4.3.73java
liferayrelease.portal.bomMatch7.4.3.74java
liferayrelease.portal.bomMatch7.4.3.75java
liferayrelease.portal.bomMatch7.4.3.76java
liferayrelease.portal.bomMatch7.4.3.77java
liferayrelease.portal.bomMatch7.4.3.78java
liferayrelease.portal.bomMatch7.4.3.79java
liferayrelease.portal.bomMatch7.4.3.8java
liferayrelease.portal.bomMatch7.4.3.80java
liferayrelease.portal.bomMatch7.4.3.81java
liferayrelease.portal.bomMatch7.4.3.82java
liferayrelease.portal.bomMatch7.4.3.83java
liferayrelease.portal.bomMatch7.4.3.84java
liferayrelease.portal.bomMatch7.4.3.85java
liferayrelease.portal.bomMatch7.4.3.85-ga85java
liferayrelease.portal.bomMatch7.4.3.86java
liferayrelease.portal.bomMatch7.4.3.87java
liferayrelease.portal.bomMatch7.4.3.88java
liferayrelease.portal.bomMatch7.4.3.89java
liferayrelease.portal.bomMatch7.4.3.9java
liferayrelease.portal.bomMatch7.4.3.90java
liferayrelease.portal.bomMatch7.4.3.91java
liferayrelease.portal.bomMatch7.4.3.92java
liferayrelease.portal.bomMatch7.4.3.93java
liferayrelease.portal.bomMatch7.4.3.94java
liferayrelease.portal.bomMatch7.4.3.95java
liferayrelease.portal.bomMatch7.4.3.95-1java
liferayrelease.portal.bomMatch7.4.3.96java
liferayrelease.portal.bomMatch7.4.3.97java
liferayrelease.portal.bomMatch7.4.3.98java
liferayrelease.portal.bomMatch7.4.3.99java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Jun 2026 14:33Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.15.4
CVSS 45.1
EPSS0.00198
SSVC
liferay portalcross site scriptingimproper sanitizationasset tag namesusers admin portlet
7