https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:34:44.526067+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0892 certfr-2023-avi-0892 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… 2026-10-23T23:34:44.529744+00:00 certfr-2023-avi-0892 https://cve.radiocsirt.org/vuln/euvd-2026-163191 EUVD-2026-163191 2026-10-23T23:34:44.529777+00:00 EUVD-2026-163191 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44310 fkie_cve-2023-44310 2026-10-23T23:34:44.529792+00:00

Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page's "Name" text field.

 https://cve.radiocsirt.org/vuln/ghsa-j5gv-w838-mmcx GHSA-j5gv-w838-mmcx — Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu 2026-10-23T23:34:44.529820+00:00

Affected: Maven: com.liferay:com.liferay.layout.impl, Maven: com.liferay.portal:release.dxp.bom

Stored cross-site scripting (XSS) vulnerability in Page Tree menu in Liferay Layout Implementation before 6.0.102 from Liferay Portal (7.3.6 through 7.4.3.78), and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page's "Name" text field.

 https://cve.radiocsirt.org/vuln/gsd-2023-44310 gsd-2023-44310 2026-10-23T23:34:44.529847+00:00 gsd-2023-44310 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2670 WID-SEC-W-2023-2670 — Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-23T23:34:44.529859+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.