https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:40:42.275777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T03:40:42.279009+00:00 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252788 EUVD-2026-252788 2026-10-04T03:40:42.279055+00:00 EUVD-2026-252788 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43800 fkie_cve-2025-43800 2026-10-04T03:40:42.279071+00:00

Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.

 https://cve.radiocsirt.org/vuln/ghsa-jfv5-r382-xvwh GHSA-jfv5-r382-xvwh — Liferay Portal Cross-site Scripting (XSS) vulnerability 2026-10-04T03:40:42.279101+00:00

Affected: Maven: com.liferay:com.liferay.dynamic.data.mapping.form.field.type

Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064 WID-SEC-W-2025-2064 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-04T03:40:42.279144+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.