https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:33:43.927196+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T22:33:43.977312+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-226144 EUVD-2026-226144 2026-10-06T22:33:43.977361+00:00 EUVD-2026-226144 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11993 fkie_cve-2024-11993 2026-10-06T22:33:43.977375+00:00

Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.38, and Liferay DXP 7.4 GA through update 38 allows remote attackers to execute arbitrary web script or HTML via Dispatch name field

 https://cve.radiocsirt.org/vuln/ghsa-4hxr-28mv-q729 GHSA-4hxr-28mv-q729 — Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting 2026-10-06T22:33:43.977407+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.1.0 through 7.4.3.38, and Liferay DXP 7.4 GA through update 38, 7.3 GA through update 36, 7.2 GA through fix pack 20 and 7.1 GA through fix pack 28 allows remote attackers to execute arbitrary web script or HTML via Dispatch name field

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3721 WID-SEC-W-2024-3721 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-06T22:33:43.977437+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.