https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T22:06:07.859278+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0880 certfr-2023-avi-0880 — Une vulnérabilité a été découverte dans les produits Liferay. Elle permet à un attaquant de provoquer une injection de… 2026-10-23T22:06:07.926515+00:00 certfr-2023-avi-0880 https://cve.radiocsirt.org/vuln/euvd-2026-163193 EUVD-2026-163193 2026-10-23T22:06:07.926554+00:00 EUVD-2026-163193 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42497 fkie_cve-2023-42497 2026-10-23T22:06:07.926570+00:00

Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.

 https://cve.radiocsirt.org/vuln/ghsa-w2g3-j73q-7qv7 GHSA-w2g3-j73q-7qv7 — Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page 2026-10-23T22:06:07.926600+00:00

Affected: Maven: com.liferay:com.liferay.translation.web, Maven: com.liferay.portal:release.dxp.bom

Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page before 2.0.86 from Liferay Portal (7.4.3.4 through 7.4.3.85), and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.

 https://cve.radiocsirt.org/vuln/gsd-2023-42497 gsd-2023-42497 2026-10-23T22:06:07.926626+00:00 gsd-2023-42497 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2670 WID-SEC-W-2023-2670 — Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-23T22:06:07.926638+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.