Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-Site Scripting (XSS)

🗓️ 28 Mar 2025 05:59:59Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 11 Views

Vulnerability in Liferay portals due to improper input sanitization allows XSS attacks.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-2536
19 Mar 202519:18
–circl
CNNVD		Liferay Portal 跨站脚本漏洞
19 Mar 202500:00
–cnnvd
CVE		CVE-2025-2536
19 Mar 202519:00
–cve
Cvelist		CVE-2025-2536
19 Mar 202519:00
–cvelist
EUVD		EUVD-2025-6757
3 Oct 202520:07
–euvd
Github Security Blog		Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
19 Mar 202521:30
–github
Tenable Nessus		Liferay Portal CE 7.4.3.82 < 7.4.3.129 XSS
21 Mar 202500:00
–nessus
Tenable Nessus		Liferay DXP XSS (CVE-2025-2536)
21 Mar 202500:00
–nessus
NVD		CVE-2025-2536
19 Mar 202519:15
–nvd
OSV		CVE-2025-2536
19 Mar 202519:15
–osv
Rows per page
Vulners
Node
liferayrelease.dxp.bomRange2024.q2.0–2024.q2.11java
OR
liferayrelease.dxp.bomRange2024.q1.1–2024.q1.12java
OR
liferayrelease.dxp.bomRange2023.q4.0–2023.q4.10java
OR
liferayrelease.dxp.bomRange2023.q3.1–2023.q3.10java
OR
liferayrelease.dxp.bomMatch2024.q3.0java
OR
liferayrelease.dxp.bomMatch2024.q2.0java
OR
liferayrelease.dxp.bomMatch2024.q2.1java
OR
liferayrelease.dxp.bomMatch2024.q2.10java
OR
liferayrelease.dxp.bomMatch2024.q2.2java
OR
liferayrelease.dxp.bomMatch2024.q2.3java
OR
liferayrelease.dxp.bomMatch2024.q2.4java
OR
liferayrelease.dxp.bomMatch2024.q2.5java
OR
liferayrelease.dxp.bomMatch2024.q2.6java
OR
liferayrelease.dxp.bomMatch2024.q2.7java
OR
liferayrelease.dxp.bomMatch2024.q2.8java
OR
liferayrelease.dxp.bomMatch2024.q2.9java
OR
liferayrelease.dxp.bomMatch2024.q1.1java
OR
liferayrelease.dxp.bomMatch2024.q1.10java
OR
liferayrelease.dxp.bomMatch2024.q1.11java
OR
liferayrelease.dxp.bomMatch2024.q1.2java
OR
liferayrelease.dxp.bomMatch2024.q1.3java
OR
liferayrelease.dxp.bomMatch2024.q1.4java
OR
liferayrelease.dxp.bomMatch2024.q1.5java
OR
liferayrelease.dxp.bomMatch2024.q1.6java
OR
liferayrelease.dxp.bomMatch2024.q1.7java
OR
liferayrelease.dxp.bomMatch2024.q1.8java
OR
liferayrelease.dxp.bomMatch2024.q1.9java
OR
liferayrelease.dxp.bomMatch2023.q4.0java
OR
liferayrelease.dxp.bomMatch2023.q4.1java
OR
liferayrelease.dxp.bomMatch2023.q4.2java
OR
liferayrelease.dxp.bomMatch2023.q4.3java
OR
liferayrelease.dxp.bomMatch2023.q4.4java
OR
liferayrelease.dxp.bomMatch2023.q4.5java
OR
liferayrelease.dxp.bomMatch2023.q4.6java
OR
liferayrelease.dxp.bomMatch2023.q4.7java
OR
liferayrelease.dxp.bomMatch2023.q4.8java
OR
liferayrelease.dxp.bomMatch2023.q4.9java
OR
liferayrelease.dxp.bomMatch2024.q1.13java
OR
liferayrelease.dxp.bomMatch2024.q1.14java
OR
liferayrelease.dxp.bomMatch2024.q1.15java
OR
liferayrelease.dxp.bomMatch2024.q2.12java
OR
liferayrelease.dxp.bomMatch2024.q2.13java
OR
liferayrelease.dxp.bomMatch2024.q3.1java
OR
liferayrelease.dxp.bomMatch2024.q3.10java
OR
liferayrelease.dxp.bomMatch2024.q3.11java
OR
liferayrelease.dxp.bomMatch2024.q3.12java
OR
liferayrelease.dxp.bomMatch2024.q3.13java
OR
liferayrelease.dxp.bomMatch2024.q3.2java
OR
liferayrelease.dxp.bomMatch2024.q3.3java
OR
liferayrelease.dxp.bomMatch2024.q3.4java
OR
liferayrelease.dxp.bomMatch2024.q3.5java
OR
liferayrelease.dxp.bomMatch2024.q3.6java
OR
liferayrelease.dxp.bomMatch2024.q3.7java
OR
liferayrelease.dxp.bomMatch2024.q3.8java
OR
liferayrelease.dxp.bomMatch2024.q3.9java
OR
liferayrelease.dxp.bomMatch2023.q3.1java
OR
liferayrelease.dxp.bomMatch2023.q3.2java
OR
liferayrelease.dxp.bomMatch2023.q3.3java
OR
liferayrelease.dxp.bomMatch2023.q3.4java
OR
liferayrelease.dxp.bomMatch2023.q3.5java
OR
liferayrelease.dxp.bomMatch2023.q3.6java
OR
liferayrelease.dxp.bomMatch2023.q3.7java
OR
liferayrelease.dxp.bomMatch2023.q3.8java
OR
liferayrelease.dxp.bomMatch2023.q3.9java
OR
liferayrelease.portal.bomRange7.4.3.82–7.4.3.128java
OR
liferayrelease.portal.bomMatch7.4.3.100java
OR
liferayrelease.portal.bomMatch7.4.3.101java
OR
liferayrelease.portal.bomMatch7.4.3.102java
OR
liferayrelease.portal.bomMatch7.4.3.103java
OR
liferayrelease.portal.bomMatch7.4.3.104java
OR
liferayrelease.portal.bomMatch7.4.3.105java
OR
liferayrelease.portal.bomMatch7.4.3.106java
OR
liferayrelease.portal.bomMatch7.4.3.107java
OR
liferayrelease.portal.bomMatch7.4.3.112java
OR
liferayrelease.portal.bomMatch7.4.3.112-ga112java
OR
liferayrelease.portal.bomMatch7.4.3.120java
OR
liferayrelease.portal.bomMatch7.4.3.120-ga120java
OR
liferayrelease.portal.bomMatch7.4.3.125java
OR
liferayrelease.portal.bomMatch7.4.3.125-ga125java
OR
liferayrelease.portal.bomMatch7.4.3.82java
OR
liferayrelease.portal.bomMatch7.4.3.83java
OR
liferayrelease.portal.bomMatch7.4.3.84java
OR
liferayrelease.portal.bomMatch7.4.3.85java
OR
liferayrelease.portal.bomMatch7.4.3.85-ga85java
OR
liferayrelease.portal.bomMatch7.4.3.86java
OR
liferayrelease.portal.bomMatch7.4.3.87java
OR
liferayrelease.portal.bomMatch7.4.3.88java
OR
liferayrelease.portal.bomMatch7.4.3.89java
OR
liferayrelease.portal.bomMatch7.4.3.90java
OR
liferayrelease.portal.bomMatch7.4.3.91java
OR
liferayrelease.portal.bomMatch7.4.3.92java
OR
liferayrelease.portal.bomMatch7.4.3.93java
OR
liferayrelease.portal.bomMatch7.4.3.94java
OR
liferayrelease.portal.bomMatch7.4.3.95java
OR
liferayrelease.portal.bomMatch7.4.3.95-1java
OR
liferayrelease.portal.bomMatch7.4.3.96java
OR
liferayrelease.portal.bomMatch7.4.3.97java
OR
liferayrelease.portal.bomMatch7.4.3.98java
OR
liferayrelease.portal.bomMatch7.4.3.99java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Dec 2025 20:43Current
6Medium risk
Vulners AI Score6
CVSS 3.16.1
CVSS 45.1
EPSS0.00185
SSVC
cross-site scriptingliferay portalinput sanitizationfrontend javascriptweb security
11