Most recent entries from all

certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte…

2026-10-05T03:10:40.355544+00:00

certfr-2025-avi-0954

EUVD-2026-253909

2026-10-05T03:10:40.355582+00:00

EUVD-2026-253909

fkie_cve-2025-43826

2026-10-05T03:10:40.355597+00:00

Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote attackers to inject arbitrary web script or HTML via any rich text field in a web content article.

GHSA-qh92-cr5f-3595 — Liferay Portal Vulnerable to XSS in Web Content translation

2026-10-05T03:10:40.355625+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Stored Cross-site Scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote attackers to inject arbitrary web script or HTML via any rich text field in a web content article.

WID-SEC-W-2025-2169 — Liferay Portal und DXP: Mehrere Schwachstellen

2026-10-05T03:10:40.355648+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.