https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:42:58.506527+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T01:42:58.579142+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-9098 EUVD-2026-9098 2026-10-06T01:42:58.579203+00:00 EUVD-2026-9098 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40191 fkie_cve-2023-40191 2026-10-06T01:42:58.579242+00:00

Reflected cross-site scripting (XSS) vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 44 through 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the “Blocked Email Domains” text field

 https://cve.radiocsirt.org/vuln/ghsa-468x-frcm-ghx6 GHSA-468x-frcm-ghx6 — Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting 2026-10-06T01:42:58.579288+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Reflected cross-site scripting (XSS) vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 44 through 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the “Blocked Email Domains” text field

 https://cve.radiocsirt.org/vuln/gsd-2023-40191 gsd-2023-40191 2026-10-06T01:42:58.579350+00:00 gsd-2023-40191 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2026-10-06T01:42:58.579371+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.