https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:22:50.987126+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-04T08:22:50.990506+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-252325 EUVD-2026-252325 2026-10-04T08:22:50.990546+00:00 EUVD-2026-252325 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43775 fkie_cve-2025-43775 2026-10-04T08:22:50.990561+00:00

Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via remote app title field.

 https://cve.radiocsirt.org/vuln/ghsa-88g3-pv3w-5wmr GHSA-88g3-pv3w-5wmr — Liferay Portal is vulnerable to XSS attacks via its remote app title field 2026-10-04T08:22:50.990590+00:00

Affected: Maven: com.liferay:com.liferay.client.extension.web

A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via remote app title field.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2041 WID-SEC-W-2025-2041 — Liferay Portal: Mehrere Schwachstellen 2026-10-04T08:22:50.990613+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.