https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:31:17.611267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-05T22:31:17.678833+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-159263 EUVD-2026-159263 2026-10-05T22:31:17.678874+00:00 EUVD-2026-159263 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25603 fkie_cve-2024-25603 2026-10-05T22:31:17.678890+00:00

Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module's DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter.

 https://cve.radiocsirt.org/vuln/ghsa-44jg-jgjx-3xg5 GHSA-44jg-jgjx-3xg5 — Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting 2026-10-05T22:31:17.678922+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module's DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter.

 https://cve.radiocsirt.org/vuln/gsd-2024-25603 gsd-2024-25603 2026-10-05T22:31:17.678950+00:00 gsd-2024-25603 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2026-10-05T22:31:17.678962+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.