https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:30:57.654477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334678 EUVD-2026-334678 2026-10-18T20:30:57.721214+00:00 EUVD-2026-334678 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42115 fkie_cve-2022-42115 2026-10-18T20:30:57.721255+00:00

Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field's `Label` text field.

 https://cve.radiocsirt.org/vuln/ghsa-x43w-xphx-86w3 GHSA-x43w-xphx-86w3 — Liferay Portal Vulnerable to XSS in the Object Module 2026-10-18T20:30:57.721290+00:00

Affected: Maven: com.liferay:com.liferay.object.web

Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Object Web before 1.0.99 from Liferay Portal (7.4.3.4 through 7.4.3.36) allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field's `Label` text field.

 https://cve.radiocsirt.org/vuln/gsd-2022-42115 gsd-2022-42115 2026-10-18T20:30:57.721318+00:00 gsd-2022-42115