https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:26:54.030792+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0332 certfr-2025-avi-0332 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer une injection de code indirect… 2026-10-07T21:26:54.082938+00:00 certfr-2025-avi-0332 https://cve.radiocsirt.org/vuln/euvd-2026-251979 EUVD-2026-251979 2026-10-07T21:26:54.082980+00:00 EUVD-2026-251979 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3760 fkie_cve-2025-3760 2026-10-07T21:26:54.082995+00:00

A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, 7.3 GA through update 36, and 7.2 GA through fix pack 20 allows remote authenticated attackers to inject malicious JavaScript into a page.

 https://cve.radiocsirt.org/vuln/ghsa-qhp6-vp7c-g7xp GHSA-qhp6-vp7c-g7xp — Liferay Cross-site Scripting vulnerability 2026-10-07T21:26:54.083028+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, 7.3 GA through update 36, and 7.2 GA through fix pack 20 allows remote authenticated attackers to inject malicious JavaScript into a page.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0860 WID-SEC-W-2025-0860 — Liferay Portal und Liferay DXP: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-07T21:26:54.083062+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.