https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T19:16:30.299658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334682 EUVD-2026-334682 2026-10-22T19:16:30.303853+00:00 EUVD-2026-334682 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42119 fkie_cve-2022-42119 2026-10-22T19:16:30.303899+00:00

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.

 https://cve.radiocsirt.org/vuln/ghsa-wjfm-qxg2-q679 GHSA-wjfm-qxg2-q679 — Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module 2026-10-22T19:16:30.303941+00:00

Affected: Maven: com.liferay.commerce:com.liferay.commerce.catalog.web, Maven: com.liferay.portal:release.dxp.bom

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects the Commerce module before 4.0.8 from Liferay Portal (7.3.5 through 7.4.2) and Liferay DXP 7.3 before update 8.

 https://cve.radiocsirt.org/vuln/gsd-2022-42119 gsd-2022-42119 2026-10-22T19:16:30.303979+00:00 gsd-2022-42119