https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T00:34:00.540230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-196778 EUVD-2026-196778 2026-10-21T00:34:00.543796+00:00 EUVD-2026-196778 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33938 fkie_cve-2023-33938 2026-10-21T00:34:00.543842+00:00

Cross-site scripting (XSS) vulnerability in the App Builder module's custom object details page in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before update 14 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an App Builder custom object's `Name` field.

 https://cve.radiocsirt.org/vuln/ghsa-wvhw-5m89-64gv GHSA-wvhw-5m89-64gv — Cross-site scripting in Liferay Portal 2026-10-21T00:34:00.543896+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Cross-site scripting (XSS) vulnerability in the App Builder module's custom object details page in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before update 14 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an App Builder custom object's `Name` field.

 https://cve.radiocsirt.org/vuln/gsd-2023-33938 gsd-2023-33938 2026-10-21T00:34:00.543930+00:00 gsd-2023-33938