Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-Site Scripting (XSS)

🗓️ 28 Mar 2025 05:59:59Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 13 Views

Vulnerability in Liferay portals due to improper input sanitization allows XSS attacks.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-2536
19 Mar 202519:18
–circl
CNNVD		Liferay Portal 跨站脚本漏洞
19 Mar 202500:00
–cnnvd
CVE		CVE-2025-2536
19 Mar 202519:00
–cve
Cvelist		CVE-2025-2536
19 Mar 202519:00
–cvelist
EUVD		EUVD-2025-6757
3 Oct 202520:07
–euvd
Github Security Blog		Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
19 Mar 202521:30
–github
Tenable Nessus		Liferay Portal CE 7.4.3.82 < 7.4.3.129 XSS
21 Mar 202500:00
–nessus
Tenable Nessus		Liferay DXP XSS (CVE-2025-2536)
21 Mar 202500:00
–nessus
NVD		CVE-2025-2536
19 Mar 202519:15
–nvd
OSV		CVE-2025-2536
19 Mar 202519:15
–osv
Rows per page
Vulners
Node
OR
liferayrelease.dxp.bomRange2024.q2.0–2024.q2.11java
liferayrelease.dxp.bomRange2024.q1.1–2024.q1.12java
liferayrelease.dxp.bomRange2023.q4.0–2023.q4.10java
liferayrelease.dxp.bomRange2023.q3.1–2023.q3.10java
liferayrelease.dxp.bomMatch2024.q3.0java
liferayrelease.dxp.bomMatch2024.q2.0java
liferayrelease.dxp.bomMatch2024.q2.1java
liferayrelease.dxp.bomMatch2024.q2.10java
liferayrelease.dxp.bomMatch2024.q2.2java
liferayrelease.dxp.bomMatch2024.q2.3java
liferayrelease.dxp.bomMatch2024.q2.4java
liferayrelease.dxp.bomMatch2024.q2.5java
liferayrelease.dxp.bomMatch2024.q2.6java
liferayrelease.dxp.bomMatch2024.q2.7java
liferayrelease.dxp.bomMatch2024.q2.8java
liferayrelease.dxp.bomMatch2024.q2.9java
liferayrelease.dxp.bomMatch2024.q1.1java
liferayrelease.dxp.bomMatch2024.q1.10java
liferayrelease.dxp.bomMatch2024.q1.11java
liferayrelease.dxp.bomMatch2024.q1.2java
liferayrelease.dxp.bomMatch2024.q1.3java
liferayrelease.dxp.bomMatch2024.q1.4java
liferayrelease.dxp.bomMatch2024.q1.5java
liferayrelease.dxp.bomMatch2024.q1.6java
liferayrelease.dxp.bomMatch2024.q1.7java
liferayrelease.dxp.bomMatch2024.q1.8java
liferayrelease.dxp.bomMatch2024.q1.9java
liferayrelease.dxp.bomMatch2023.q4.0java
liferayrelease.dxp.bomMatch2023.q4.1java
liferayrelease.dxp.bomMatch2023.q4.2java
liferayrelease.dxp.bomMatch2023.q4.3java
liferayrelease.dxp.bomMatch2023.q4.4java
liferayrelease.dxp.bomMatch2023.q4.5java
liferayrelease.dxp.bomMatch2023.q4.6java
liferayrelease.dxp.bomMatch2023.q4.7java
liferayrelease.dxp.bomMatch2023.q4.8java
liferayrelease.dxp.bomMatch2023.q4.9java
liferayrelease.dxp.bomMatch2024.q1.13java
liferayrelease.dxp.bomMatch2024.q1.14java
liferayrelease.dxp.bomMatch2024.q1.15java
liferayrelease.dxp.bomMatch2024.q2.12java
liferayrelease.dxp.bomMatch2024.q2.13java
liferayrelease.dxp.bomMatch2024.q3.1java
liferayrelease.dxp.bomMatch2024.q3.10java
liferayrelease.dxp.bomMatch2024.q3.11java
liferayrelease.dxp.bomMatch2024.q3.12java
liferayrelease.dxp.bomMatch2024.q3.13java
liferayrelease.dxp.bomMatch2024.q3.2java
liferayrelease.dxp.bomMatch2024.q3.3java
liferayrelease.dxp.bomMatch2024.q3.4java
liferayrelease.dxp.bomMatch2024.q3.5java
liferayrelease.dxp.bomMatch2024.q3.6java
liferayrelease.dxp.bomMatch2024.q3.7java
liferayrelease.dxp.bomMatch2024.q3.8java
liferayrelease.dxp.bomMatch2024.q3.9java
liferayrelease.dxp.bomMatch2023.q3.1java
liferayrelease.dxp.bomMatch2023.q3.2java
liferayrelease.dxp.bomMatch2023.q3.3java
liferayrelease.dxp.bomMatch2023.q3.4java
liferayrelease.dxp.bomMatch2023.q3.5java
liferayrelease.dxp.bomMatch2023.q3.6java
liferayrelease.dxp.bomMatch2023.q3.7java
liferayrelease.dxp.bomMatch2023.q3.8java
liferayrelease.dxp.bomMatch2023.q3.9java
liferayrelease.portal.bomRange7.4.3.82–7.4.3.128java
liferayrelease.portal.bomMatch7.4.3.100java
liferayrelease.portal.bomMatch7.4.3.101java
liferayrelease.portal.bomMatch7.4.3.102java
liferayrelease.portal.bomMatch7.4.3.103java
liferayrelease.portal.bomMatch7.4.3.104java
liferayrelease.portal.bomMatch7.4.3.105java
liferayrelease.portal.bomMatch7.4.3.106java
liferayrelease.portal.bomMatch7.4.3.107java
liferayrelease.portal.bomMatch7.4.3.112java
liferayrelease.portal.bomMatch7.4.3.112-ga112java
liferayrelease.portal.bomMatch7.4.3.120java
liferayrelease.portal.bomMatch7.4.3.120-ga120java
liferayrelease.portal.bomMatch7.4.3.125java
liferayrelease.portal.bomMatch7.4.3.125-ga125java
liferayrelease.portal.bomMatch7.4.3.82java
liferayrelease.portal.bomMatch7.4.3.83java
liferayrelease.portal.bomMatch7.4.3.84java
liferayrelease.portal.bomMatch7.4.3.85java
liferayrelease.portal.bomMatch7.4.3.85-ga85java
liferayrelease.portal.bomMatch7.4.3.86java
liferayrelease.portal.bomMatch7.4.3.87java
liferayrelease.portal.bomMatch7.4.3.88java
liferayrelease.portal.bomMatch7.4.3.89java
liferayrelease.portal.bomMatch7.4.3.90java
liferayrelease.portal.bomMatch7.4.3.91java
liferayrelease.portal.bomMatch7.4.3.92java
liferayrelease.portal.bomMatch7.4.3.93java
liferayrelease.portal.bomMatch7.4.3.94java
liferayrelease.portal.bomMatch7.4.3.95java
liferayrelease.portal.bomMatch7.4.3.95-1java
liferayrelease.portal.bomMatch7.4.3.96java
liferayrelease.portal.bomMatch7.4.3.97java
liferayrelease.portal.bomMatch7.4.3.98java
liferayrelease.portal.bomMatch7.4.3.99java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Dec 2025 20:43Current
6Medium risk
Vulners AI Score6
CVSS 3.16.1
CVSS 45.1
EPSS0.00271
SSVC
cross-site scriptingliferay portalinput sanitizationfrontend javascriptweb security
13