https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:35:53.143294+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0892 certfr-2023-avi-0892 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… 2026-10-23T23:35:53.147314+00:00 certfr-2023-avi-0892 https://cve.radiocsirt.org/vuln/euvd-2026-9419 EUVD-2026-9419 2026-10-23T23:35:53.147350+00:00 EUVD-2026-9419 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42629 fkie_cve-2023-42629 2026-10-23T23:35:53.147371+00:00

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87, and Liferay DXP 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Vocabulary's 'description' text field.

 https://cve.radiocsirt.org/vuln/ghsa-g44j-f8wm-6622 GHSA-g44j-f8wm-6622 — Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page 2026-10-23T23:35:53.147437+00:00

Affected: Maven: com.liferay:com.liferay.asset.categories.admin.web, Maven: com.liferay.portal:release.dxp.bom

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in the Asset Categories Admin Web module before 5.0.87 from Liferay Portal (7.4.2 through 7.4.3.87), and Liferay DXP 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Vocabulary's 'description' text field.

 https://cve.radiocsirt.org/vuln/gsd-2023-42629 gsd-2023-42629 2026-10-23T23:35:53.147465+00:00 gsd-2023-42629 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2670 WID-SEC-W-2023-2670 — Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-23T23:35:53.147476+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.