https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T10:21:26.133118+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0491 certfr-2023-avi-0491 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une exécutio… 2026-10-15T10:21:26.136506+00:00 certfr-2023-avi-0491 https://cve.radiocsirt.org/vuln/euvd-2026-196760 EUVD-2026-196760 2026-10-15T10:21:26.136541+00:00 EUVD-2026-196760 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3193 fkie_cve-2023-3193 2026-10-15T10:21:26.136556+00:00

Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.

 https://cve.radiocsirt.org/vuln/ghsa-qxf6-mp24-52cv GHSA-qxf6-mp24-52cv — Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module 2026-10-15T10:21:26.136583+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.

 https://cve.radiocsirt.org/vuln/gsd-2023-3193 gsd-2023-3193 2026-10-15T10:21:26.136649+00:00 gsd-2023-3193