https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T18:19:16.760980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-431 certfr-2022-avi-431 — De multiples vulnérabilités ont été découvertes dans Liferay Portal. Elles permettent à un attaquant de provoquer une i… 2026-10-18T18:19:16.764239+00:00 certfr-2022-avi-431 https://cve.radiocsirt.org/vuln/euvd-2026-334504 EUVD-2026-334504 2026-10-18T18:19:16.764279+00:00 EUVD-2026-334504 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26596 fkie_cve-2022-26596 2026-10-18T18:19:16.764305+00:00

Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.

 https://cve.radiocsirt.org/vuln/ghsa-w7f2-6896-6mm2 GHSA-w7f2-6896-6mm2 — Liferay Portal and Liferay DXP allows arbitrary injection via web content template names 2026-10-18T18:19:16.764336+00:00

Affected: Maven: com.liferay:com.liferay.journal.content.web, Maven: com.liferay.portal:release.dxp.bom

Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page before 5.0.15 in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.

 https://cve.radiocsirt.org/vuln/gsd-2022-26596 gsd-2022-26596 2026-10-18T18:19:16.764365+00:00 gsd-2022-26596