https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T03:22:01.135933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0785 certfr-2025-avi-0785 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… 2026-10-19T03:22:01.187702+00:00 certfr-2025-avi-0785 https://cve.radiocsirt.org/vuln/euvd-2026-252454 EUVD-2026-252454 2026-10-19T03:22:01.187750+00:00 EUVD-2026-252454 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43783 fkie_cve-2025-43783 2026-10-19T03:22:01.187771+00:00

Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 update 73 through update 92 allows remote attackers to inject arbitrary web script or HTML via the /c/portal/comment/discussion/get_editor path.

 https://cve.radiocsirt.org/vuln/ghsa-jhgr-j9cj-8j62 GHSA-jhgr-j9cj-8j62 — Liferay Portal is vulnerable to Reflected XSS attack through get_editor path 2026-10-19T03:22:01.187814+00:00

Affected: Maven: com.liferay:com.liferay.frontend.editor.ckeditor.web

A reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 update 73 through update 92 allows remote attackers to inject arbitrary web script or HTML via the /c/portal/comment/discussion/get_editor path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2030 WID-SEC-W-2025-2030 — Liferay Portal und DXPL: Mehrere Schwachstellen 2026-10-19T03:22:01.187853+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.