https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T01:12:51.417319+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0892 certfr-2023-avi-0892 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… 2026-10-24T01:12:51.421504+00:00 certfr-2023-avi-0892 https://cve.radiocsirt.org/vuln/euvd-2026-9443 EUVD-2026-9443 2026-10-24T01:12:51.421540+00:00 EUVD-2026-9443 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42628 fkie_cve-2023-42628 2026-10-24T01:12:51.421555+00:00

Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML into a parent wiki page via a crafted payload injected into a wiki page's ‘Content’ text field.

 https://cve.radiocsirt.org/vuln/ghsa-hv45-r2f5-fmhj GHSA-hv45-r2f5-fmhj — Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget 2026-10-24T01:12:51.421587+00:00

Affected: Maven: com.liferay:com.liferay.wiki.web, Maven: com.liferay.portal:release.dxp.bom

Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Wiki Web before 7.0.95 from Liferay Portal (7.1.0 through 7.4.3.87), and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML into a parent wiki page via a crafted payload injected into a wiki page's ‘Content’ text field.

 https://cve.radiocsirt.org/vuln/gsd-2023-42628 gsd-2023-42628 2026-10-24T01:12:51.421620+00:00 gsd-2023-42628 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2699 WID-SEC-W-2023-2699 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-24T01:12:51.421632+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.