<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-05T03:09:44.291187+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954</id>
    <title>certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte…</title>
    <updated>2026-10-05T03:09:44.294651+00:00</updated>
    <content>certfr-2025-avi-0954</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-253820</id>
    <title>EUVD-2026-253820</title>
    <updated>2026-10-05T03:09:44.294690+00:00</updated>
    <content>EUVD-2026-253820</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-253820"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-43812</id>
    <title>fkie_cve-2025-43812</title>
    <updated>2026-10-05T03:09:44.294705+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a web content structure's Name text field</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-43812"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-jv8x-mm3v-75r7</id>
    <title>GHSA-jv8x-mm3v-75r7 — Liferay Portal vulnerable to cross-site scripting in the web content template</title>
    <updated>2026-10-05T03:09:44.294734+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay:com.liferay.journal.web</p>
<p>Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a web content structure's Name text field</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-jv8x-mm3v-75r7"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2151</id>
    <title>WID-SEC-W-2025-2151 — Liferay Portal und DXP: Mehrere Schwachstellen</title>
    <updated>2026-10-05T03:09:44.294761+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder einen Denial of Service herbeizuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2151"/>
  </entry>
</feed>
