https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:29:06.603676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-05T13:29:06.676643+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-232576 EUVD-2026-232576 2026-10-05T13:29:06.676691+00:00 EUVD-2026-232576 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26269 fkie_cve-2024-26269 2026-10-05T13:29:06.676707+00:00

Cross-site scripting (XSS) vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via the anchor (hash) part of a URL.

 https://cve.radiocsirt.org/vuln/ghsa-rwhv-hvj2-qrqm GHSA-rwhv-hvj2-qrqm — Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting 2026-10-05T13:29:06.676741+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Cross-site scripting (XSS) vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via the anchor (hash) part of a URL.

 https://cve.radiocsirt.org/vuln/gsd-2024-26269 gsd-2024-26269 2026-10-05T13:29:06.676786+00:00 gsd-2024-26269 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2026-10-05T13:29:06.676799+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.