https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:22:32.213329+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0800 certfr-2025-avi-0800 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T01:22:32.216325+00:00 certfr-2025-avi-0800 https://cve.radiocsirt.org/vuln/euvd-2026-252853 EUVD-2026-252853 2026-10-04T01:22:32.216372+00:00 EUVD-2026-252853 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43804 fkie_cve-2025-43804 2026-10-04T01:22:32.216387+00:00

Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_search_web_portlet_SearchPortlet_userId parameter.

 https://cve.radiocsirt.org/vuln/ghsa-ccrc-5vp5-vp5j GHSA-ccrc-5vp5-vp5j — Liferay search widget vulnerable to Cross-site Scripting 2026-10-04T01:22:32.216416+00:00

Affected: Maven: com.liferay:com.liferay.portal.search

There is a Cross-site scripting (XSS) vulnerability in Liferay Portal's Search widget . Versions 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allow remote attackers to inject arbitrary web scripts or HTML via the `_com_liferay_portal_search_web_portlet_SearchPortlet_userId` parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2076 WID-SEC-W-2025-2076 — Liferay Portal: Mehrere Schwachstellen 2026-10-04T01:22:32.216441+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen.