https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T01:13:42.945010+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0892 certfr-2023-avi-0892 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… 2026-10-24T01:13:42.948695+00:00 certfr-2023-avi-0892 https://cve.radiocsirt.org/vuln/euvd-2026-244179 EUVD-2026-244179 2026-10-24T01:13:42.948730+00:00 EUVD-2026-244179 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42627 fkie_cve-2023-42627 2026-10-24T01:13:42.948745+00:00

Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal 7.3.5 through 7.4.3.91, and Liferay DXP 7.3 update 33 and earlier, and 7.4 before update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a (1) Shipping Name, (2) Shipping Phone Number, (3) Shipping Address, (4) Shipping Address 2, (5) Shipping Address 3, (6) Shipping Zip, (7) Shipping City, (8) Shipping Region (9), Shipping Country, (10) Billing Name, (11) Billing Phone Number, (12) Billing Address, (13) Billing Address 2, (14) Billing Address 3, (15) Billing Zip, (16) Billing City, (17) Billing Region, (18) Billing Country, or (19) Region Code.

 https://cve.radiocsirt.org/vuln/ghsa-qp68-5v39-r869 GHSA-qp68-5v39-r869 — Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module 2026-10-24T01:13:42.948775+00:00

Affected: Maven: com.liferay.commerce:com.liferay.commerce.address.content.web, Maven: com.liferay.portal:release.dxp.bom

Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module before 4.0.35 from Liferay Portal (7.3.5 through 7.4.3.91), and Liferay DXP 7.3 update 33 and earlier, and 7.4 before update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a (1) Shipping Name, (2) Shipping Phone Number, (3) Shipping Address, (4) Shipping Address 2, (5) Shipping Address 3, (6) Shipping Zip, (7) Shipping City, (8) Shipping Region (9), Shipping Country, (10) Billing Name, (11) Billing Phone Number, (12) Billing Address, (13) Billing Address 2, (14) Billing Address 3, (15) Billing Zip, (16) Billing City, (17) Billing Region, (18) Billing Country, or (19) Region Code.

 https://cve.radiocsirt.org/vuln/gsd-2023-42627 gsd-2023-42627 2026-10-24T01:13:42.948805+00:00 gsd-2023-42627 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2699 WID-SEC-W-2023-2699 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-24T01:13:42.948817+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.